CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Yogesh Pawar Bulk Edit Post Titles bulk-edit-post-titles allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Edit Post Titles: from n/a through <= 5.0.0.
Explanation of Vulnerability in Simple Terms
The Bulk Edit Post Titles plugin for WordPress does not properly check user permissions before allowing post title modifications. A logged-in user with low privileges can change post titles without authorization. The vulnerability affects versions up to 5.0.0. Site administrators should update to a version newer than 5.0.0 to prevent unauthorized post edits.
What an attacker can do
Modify post titles on the site without proper authorization.
Potential impact on your site
Unauthorized users can alter post titles, potentially defacing content or disrupting site messaging.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
