CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WordPress Page Builder Sandwich Team Page Builder Sandwich – Front-End Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Page Builder Sandwich – Front-End Page Builder: from n/a through 5.1.0.
Explanation of Vulnerability in Simple Terms
Page Builder Sandwich versions up to 5.1.0 lack proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify site content or settings they should not have access to. The vulnerability requires an active WordPress account but no special interaction from other users.
What an attacker can do
Modify site content or settings beyond their assigned permission level.
Potential impact on your site
Unauthorized changes to pages or site configuration by low-privilege users; potential data integrity issues.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Contributor or Author).
Key dates
External resources
Related vulnerabilities
