CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
The Rankology SEO and Analytics Tool plugin for WordPress is vulnerable to unauthorized modification of data due to an incorrect capability check on the 'rankology_code_block' page in all versions up to, and including, 2.0. This makes it possible for authenticated attackers, with Editor-level access and above, to add header and footer code blocks.
Explanation of Vulnerability in Simple Terms
Rankology SEO and Analytics Tool versions 2.0 and earlier contain an integrity issue that allows high-privilege users to modify data without proper authorization controls. The vulnerability requires network access and administrative credentials to exploit. While the impact is limited to data modification, organizations using this tool should update to a patched version to prevent unauthorized changes by privileged accounts.
What an attacker can do
Modify data within the application if they have high-level administrative access.
Potential impact on your site
Administrators with compromised credentials could alter analytics data or SEO settings without detection.
Conditions required to exploit
Attacker must have high-privilege administrative credentials and network access to the application.
Key dates
External resources
Related vulnerabilities
