CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in vivek2tamrakar WP REST API FNS rest-api-fns allows Authentication Bypass.This issue affects WP REST API FNS: from n/a through <= 1.0.0.
Explanation of Vulnerability in Simple Terms
WP REST API FNS versions 1.0.0 and earlier contain an authentication bypass vulnerability in the REST API. An attacker can read, modify, or delete site data without valid credentials. The vulnerability affects all versions from release through 1.0.0. Site administrators should update immediately to a patched version.
What an attacker can do
Read, modify, or delete site data without authentication.
Potential impact on your site
Attackers can access, alter, or destroy site content and user data without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
