CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
The Shortcode Cleaner Lite plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the download_backup() function in all versions up to, and including, 1.0.9. This makes it possible for authenticated attackers, with Subscriber-level access and above, to export arbitrary options.
Explanation of Vulnerability in Simple Terms
Shortcode Cleaner Lite versions 1.0.9 and earlier lack proper authorization checks, allowing authenticated users with low privileges to read sensitive data they should not access. An attacker with a basic user account can retrieve confidential information from the site without additional interaction. The vulnerability does not allow data modification or system disruption.
What an attacker can do
Read sensitive data on the site that should be restricted to higher-privilege users.
Potential impact on your site
Any registered user can access confidential information intended only for administrators or editors.
Conditions required to exploit
Attacker must have a low-privilege authenticated account on the site.
Key dates
External resources
