CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Northern Beaches Websites WP Custom Admin Interface wp-custom-admin-interface allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Custom Admin Interface: from n/a through <= 7.31.
Explanation of Vulnerability in Simple Terms
WP Custom Admin Interface versions 7.31 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify site data they should not access. The vulnerability requires a valid user account but no special interaction. Administrators should update to a version newer than 7.31 to prevent unauthorized changes by low-privilege users.
What an attacker can do
Modify site data without proper authorization as a low-privilege authenticated user.
Potential impact on your site
Low-privilege users (subscribers, contributors) can alter site content or settings they should not be able to change.
Conditions required to exploit
Valid WordPress user account with low-level privileges; network access to the site.
Key dates
External resources
Related vulnerabilities
