CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in A WP Life Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow.This issue affects Media Slider – Photo Sleder, Video Slider, Link Slider, Carousal Slideshow: from n/a through 1.3.9.
Explanation of Vulnerability in Simple Terms
The Media Slider plugin for WordPress contains a missing authorization flaw that allows authenticated users with low privileges to access sensitive information they should not be able to view. An attacker with a basic user account can read data that is normally restricted to higher-privilege roles. This affects versions up to 1.3.9.
What an attacker can do
Read sensitive data restricted to higher-privilege users.
Potential impact on your site
Unauthorized users can access private or restricted slider content and configuration data.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
