CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Felix Welberg Extended Post Status allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Extended Post Status: from n/a through 1.0.19.
Explanation of Vulnerability in Simple Terms
Extended Post Status versions up to 1.0.19 lack proper authorization checks on certain functions. A logged-in user with low privileges can read sensitive data or modify content they should not have access to. The vulnerability requires valid site credentials but no additional user interaction.
What an attacker can do
Read or modify post data and settings without proper permission checks.
Potential impact on your site
Unauthorized users can access or alter post content and metadata beyond their assigned role.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
