CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in CodeZel Combo WP Rewrite Slugs combo-wp-rewrite-slugs allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Combo WP Rewrite Slugs: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
Combo WP Rewrite Slugs versions 1.0 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify site content and availability. An attacker with a basic user account can alter data or disrupt service without needing higher permissions. Update to a version newer than 1.0 immediately.
What an attacker can do
Modify site content or disrupt availability with a low-privilege user account.
Potential impact on your site
Any registered user can alter your site's content or cause service disruptions without admin approval.
Conditions required to exploit
Attacker must have a valid WordPress user account with low-level permissions.
Key dates
External resources
Related vulnerabilities
