CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Themeisle Otter - Gutenberg Block otter-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Otter - Gutenberg Block: from n/a through <= 3.0.3.
Explanation of Vulnerability in Simple Terms
Otter - Gutenberg Block plugin for WordPress versions 3.0.3 and earlier lacks proper authorization checks on certain administrative functions. A high-privileged user (such as an administrator) can modify site content or settings without proper permission validation. The vulnerability has low integrity impact and requires administrator-level access to exploit.
What an attacker can do
Modify site content or settings without proper authorization checks.
Potential impact on your site
An administrator account could be misused to alter site content or configuration beyond their intended scope.
Conditions required to exploit
Attacker must have administrator-level access to the WordPress site.
Key dates
External resources
Related vulnerabilities
