CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
What the vulnerability does
Missing Authorization vulnerability in nouthemes Leopard - WordPress offload media allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Leopard - WordPress offload media: from n/a through 2.0.36.
Explanation of Vulnerability in Simple Terms
The Leopard WordPress media offload plugin through version 2.0.36 lacks proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify plugin settings or trigger actions they should not have access to, potentially disrupting media handling or site availability. Update to a version newer than 2.0.36.
What an attacker can do
Modify plugin settings or disrupt media offload functionality without proper authorization.
Potential impact on your site
Unauthorized users could alter media offload configuration, causing data loss or service disruption.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
