CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in A WP Life Slider Responsive Slideshow – Image slider, Gallery slideshow.This issue affects Slider Responsive Slideshow – Image slider, Gallery slideshow: from n/a through 1.4.0.
Explanation of Vulnerability in Simple Terms
The Slider Responsive Slideshow plugin for WordPress does not properly check user permissions before allowing access to certain functions. A logged-in user with low privileges can read data they should not have access to. The vulnerability affects versions up to 1.4.0.
What an attacker can do
Read sensitive data from the site that should be restricted to higher-privilege users.
Potential impact on your site
Unauthorized users can access restricted information through the plugin, potentially exposing private content or configuration details.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
