CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in i.lychkov Mark New Posts mark-new-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Mark New Posts: from n/a through <= 7.5.1.
Explanation of Vulnerability in Simple Terms
Mark New Posts versions 7.5.1 and earlier lack proper authorization checks on certain administrative functions. A logged-in user with low privileges can modify site content or disable features without proper permission. The vulnerability requires an active user account but no special interaction from other users.
What an attacker can do
Modify or disable site content and features without proper authorization.
Potential impact on your site
Unauthorized users can alter posts and plugin settings, potentially disrupting site functionality.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
