CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion') vulnerability in IdeaBox Creations PowerPack Lite for Beaver Builder powerpack-addon-for-beaver-builder.This issue affects PowerPack Lite for Beaver Builder: from n/a through <= 1.3.0.3.
Explanation of Vulnerability in Simple Terms
PowerPack Lite for Beaver Builder versions up to 1.3.0.3 contain an information disclosure vulnerability. An authenticated administrator can read sensitive data they should not have access to. The vulnerability requires high-level privileges and does not affect data integrity or availability. Update to a version newer than 1.3.0.3.
What an attacker can do
Read sensitive information restricted to other users or system components.
Potential impact on your site
Administrators with malicious intent can access confidential data like user information or configuration details.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
