CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in ShapedPlugin LLC Category Slider for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Category Slider for WooCommerce: from n/a through 1.4.15.
Explanation of Vulnerability in Simple Terms
Category Slider for WooCommerce versions up to 1.4.15 lack proper authorization checks, allowing authenticated users with low privileges to modify slider data they should not have access to. An attacker with a basic user account can alter category slider settings without proper permission validation. The vulnerability affects data integrity but does not expose sensitive information or disrupt site availability.
What an attacker can do
Modify category slider settings and data without proper authorization.
Potential impact on your site
Unauthorized users can alter how product category sliders display, potentially disrupting store presentation and customer experience.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
Related vulnerabilities
