CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Exposure of Sensitive Information to an Unauthorized Actor vulnerability in J.N. Breetvelt a.K.A. OpaJaap WP Photo Album Plus allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects WP Photo Album Plus: from n/a through 8.5.02.005.
Explanation of Vulnerability in Simple Terms
WP Photo Album Plus versions up to 8.5.02.005 contain an information exposure vulnerability that allows unauthenticated attackers to modify data on the site without user interaction. The vulnerability stems from insufficient access controls on certain operations. Site administrators should update to a version newer than 8.5.02.005 to remediate this issue.
What an attacker can do
Modify site data without authentication or user interaction.
Potential impact on your site
Unauthorized changes to site content or settings without admin approval or visibility.
Conditions required to exploit
Network access only; no authentication or user action required.
Key dates
External resources
Related vulnerabilities
