CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP OnlineSupport, Essential Plugin Accordion and Accordion Slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Accordion and Accordion Slider: from n/a through 1.2.4.
Explanation of Vulnerability in Simple Terms
The Accordion and Accordion Slider plugin for WordPress does not properly check user permissions before allowing certain actions. An attacker without authentication can modify plugin settings or content, potentially altering how accordions display on the site. Update to a version newer than 1.2.4 to resolve this issue.
What an attacker can do
Modify accordion settings or content without logging in.
Potential impact on your site
Accordion content or configuration could be altered by unauthorized users, affecting site appearance and user experience.
Conditions required to exploit
Network access to the WordPress site; no authentication required.
Key dates
External resources
Related vulnerabilities
