CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Jose Mortellaro Freesoul Deactivate Plugins – Plugin manager and cleanup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Freesoul Deactivate Plugins – Plugin manager and cleanup: from n/a through 2.1.3.
Explanation of Vulnerability in Simple Terms
The Freesoul Deactivate Plugins WordPress plugin through version 2.1.3 does not properly check user permissions before allowing certain administrative actions. A logged-in user with low privileges can trigger a denial-of-service condition by disrupting plugin functionality. The vulnerability requires valid WordPress authentication but no special role or capability.
What an attacker can do
A low-privilege logged-in user can disrupt plugin functionality and cause a denial of service.
Potential impact on your site
Legitimate users may experience plugin unavailability or malfunction if a low-privilege account is compromised or misused.
Conditions required to exploit
Attacker must have a valid WordPress user account with at least low-level privileges.
Key dates
External resources
Related vulnerabilities
