CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in beautifultemplates ST Gallery WP st-gallery-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ST Gallery WP: from n/a through <= 1.0.8.
Explanation of Vulnerability in Simple Terms
ST Gallery WP versions up to 1.0.8 lack proper authorization checks, allowing authenticated users to modify or delete gallery content they should not have access to. An attacker with a low-privilege account can alter the integrity of galleries or disable functionality. Update to a version newer than 1.0.8.
What an attacker can do
Modify or delete gallery content without proper permission checks.
Potential impact on your site
Authenticated users can tamper with gallery data and availability across your site.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
