CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in wp-buy Visitors Traffic Real Time Statistics visitors-traffic-real-time-statistics allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Visitors Traffic Real Time Statistics: from n/a through <= 7.2.
Explanation of Vulnerability in Simple Terms
Visitors Traffic Real Time Statistics versions 7.2 and earlier lack proper authorization checks, allowing authenticated users to access sensitive traffic statistics data they should not see. An attacker with a low-privilege account can read visitor analytics and statistics without proper permission validation. The vulnerability requires an existing user account but no additional user interaction.
What an attacker can do
Read visitor traffic statistics and analytics data without proper authorization.
Potential impact on your site
Visitor analytics and traffic data may be exposed to unauthorized users with site accounts.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
