CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in boldthemes Bold Page Builder bold-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bold Page Builder: from n/a through <= 5.1.3.
Explanation of Vulnerability in Simple Terms
Bold Page Builder versions up to 5.1.3 lack proper authorization checks, allowing authenticated users with low privileges to read sensitive information they should not access. An attacker with a basic user account can view data restricted to higher-privilege roles. The vulnerability requires an existing login but poses a direct information disclosure risk.
What an attacker can do
Read sensitive data restricted to higher-privilege users by making direct requests.
Potential impact on your site
User data and restricted information may be exposed to any authenticated user, even those with minimal permissions.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
