CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in fifu.App Featured Image from URL allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Featured Image from URL: from n/a through 4.8.1.
Explanation of Vulnerability in Simple Terms
Featured Image from URL through version 4.8.1 lacks authorization checks on certain operations, allowing unauthenticated attackers to modify image data. The vulnerability requires no user interaction and is exploitable over the network. Integrity of featured images can be compromised without authentication.
What an attacker can do
Modify featured image data without logging in to the site.
Potential impact on your site
Attackers can alter featured images on posts and pages without permission, potentially defacing content.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
