CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Team Plugins360 Automatic YouTube Gallery allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Automatic YouTube Gallery: from n/a through 2.3.3.
Explanation of Vulnerability in Simple Terms
Automatic YouTube Gallery for WordPress contains an authorization flaw that allows authenticated users with low privileges to disrupt the plugin's availability. An attacker with a basic user account can trigger a denial-of-service condition affecting the gallery functionality. The vulnerability requires valid WordPress credentials but no special interaction from other users.
What an attacker can do
Disrupt the YouTube gallery's availability by exploiting missing authorization checks.
Potential impact on your site
Authenticated users can cause the gallery to become unavailable or malfunction, disrupting content display.
Conditions required to exploit
Valid WordPress user account with low privileges (e.g., Subscriber or Contributor role).
Key dates
External resources
Related vulnerabilities
