CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in MobileMonkey WP-Chatbot for Messenger allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP-Chatbot for Messenger: from n/a through 4.7.
Explanation of Vulnerability in Simple Terms
WP-Chatbot for Messenger through version 4.7 fails to properly check user permissions before allowing access to certain functions. A logged-in user with low privileges can read sensitive information or disrupt service availability without proper authorization. Update to a version newer than 4.7 to resolve this issue.
What an attacker can do
Read sensitive data or disrupt service availability without proper authorization.
Potential impact on your site
Unauthorized users can access restricted plugin features, potentially exposing data or causing downtime.
Conditions required to exploit
Attacker must be logged in to the WordPress site with a low-privilege account.
Key dates
External resources
Related vulnerabilities
