CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Mad Fish Digital Bulk NoIndex & NoFollow Toolkit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk NoIndex & NoFollow Toolkit: from n/a through 1.5.
Explanation of Vulnerability in Simple Terms
The Bulk NoIndex & NoFollow Toolkit for WordPress does not properly check user permissions before allowing modifications to site indexing settings. A logged-in user with low privileges can change noindex and nofollow directives on pages, potentially affecting search engine visibility and site traffic. Update to a version newer than 1.5.
What an attacker can do
Modify noindex and nofollow settings on site pages without proper authorization.
Potential impact on your site
Unauthorized users can alter search engine indexing directives, damaging SEO and organic traffic.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
