CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Labib Ahmed Animated Rotating Words css3-rotating-words allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Rotating Words: from n/a through <= 5.4.
Explanation of Vulnerability in Simple Terms
Animated Rotating Words versions 5.4 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or disable site functionality. An attacker with a basic user account can alter the plugin's settings without restriction, potentially disrupting the site's appearance or behavior. Update to a version newer than 5.4 to restore proper access controls.
What an attacker can do
Modify or disable the plugin's functionality as a low-privilege authenticated user.
Potential impact on your site
Any registered user can change plugin settings, risking unintended site appearance changes or feature disruption.
Conditions required to exploit
Attacker must have a valid user account with low-level privileges on the site.
Key dates
External resources
Related vulnerabilities
