CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Martin Gibson WP Custom Admin Interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through 7.32.
Explanation of Vulnerability in Simple Terms
WP Custom Admin Interface versions 7.32 and earlier lack proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability requires valid site credentials but does not require user interaction from a victim.
What an attacker can do
Modify site data or settings that should be restricted to higher-privilege users.
Potential impact on your site
Unauthorized users can alter site configuration or content, potentially disrupting site operation or data integrity.
Conditions required to exploit
Attacker must have a low-privilege user account on the site (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
