CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in etruel WP Delete Post Copies etruel-del-post-copies allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Delete Post Copies: from n/a through <= 5.5.
Explanation of Vulnerability in Simple Terms
WP Delete Post Copies versions 5.5 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or delete posts they should not have access to. The vulnerability requires a valid WordPress account but no special permissions. Site administrators should update to a version newer than 5.5 to prevent unauthorized post manipulation.
What an attacker can do
Modify or delete posts without proper authorization.
Potential impact on your site
Authenticated users can alter or remove posts beyond their intended permissions, risking content loss or defacement.
Conditions required to exploit
Attacker must have a valid WordPress user account with low-level privileges.
Key dates
External resources
Related vulnerabilities
