CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Binsaifullah Easy Accordion Gutenberg Block easy-accordion-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Easy Accordion Gutenberg Block: from n/a through <= 1.2.3.
Explanation of Vulnerability in Simple Terms
The Easy Accordion Gutenberg Block plugin for WordPress does not properly check user permissions before allowing modifications to accordion content. An authenticated user with low privileges can alter accordion blocks created by other users or administrators. The vulnerability affects versions up to 1.2.3 and has low integrity impact.
What an attacker can do
Modify accordion content created by other users without proper authorization.
Potential impact on your site
Unauthorized users can alter accordion blocks, potentially defacing content or spreading misinformation on your site.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., contributor or subscriber role).
Key dates
External resources
Related vulnerabilities
