CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in osama.esh WP Visitor Statistics (Real Time Traffic) wp-stats-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Visitor Statistics (Real Time Traffic): from n/a through <= 7.5.
Explanation of Vulnerability in Simple Terms
WP Visitor Statistics (Real Time Traffic) versions 7.5 and earlier lack proper authorization checks on certain functions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability does not affect confidentiality or availability, only data integrity.
What an attacker can do
Modify plugin data or settings without proper authorization.
Potential impact on your site
Unauthorized users can alter visitor statistics, traffic data, or plugin configuration.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
