CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Charitable Donations & Fundraising Team Charitable allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Charitable: from n/a through 1.8.1.7.
Explanation of Vulnerability in Simple Terms
The Charitable plugin for WordPress contains a missing authorization check that allows unauthenticated attackers to modify data on the site. An attacker can send network requests without authentication to alter information, potentially affecting site integrity. The vulnerability does not expose sensitive data or cause service disruption, but unauthorized changes to site content or settings are possible.
What an attacker can do
Modify site data without logging in or having permission to do so.
Potential impact on your site
Unauthorized changes to site content, settings, or donation records without your knowledge or consent.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
