CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in WP iCal Availability WP iCal Availability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP iCal Availability: from n/a through 1.0.3.
Explanation of Vulnerability in Simple Terms
WP iCal Availability versions up to 1.0.3 lack proper authorization checks, allowing an attacker to modify site data through user interaction. The vulnerability does not expose sensitive information but can degrade site availability or integrity. Users should update to a version newer than 1.0.3 when available.
What an attacker can do
Modify or disable site data by tricking a user into visiting a malicious link.
Potential impact on your site
Site data can be altered or made unavailable without your knowledge or consent.
Conditions required to exploit
No authentication required, but the victim must click a link or visit a page controlled by the attacker.
Key dates
External resources
Related vulnerabilities
