CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in codeaffairs WP News Sliders wp-news-sliders allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP News Sliders: from n/a through <= 1.0.
Explanation of Vulnerability in Simple Terms
WP News Sliders versions 1.0 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify content they should not have access to. The vulnerability requires a valid WordPress account but no special interaction. Site administrators should update to a version newer than 1.0 when available.
What an attacker can do
Modify or alter content without proper permission checks.
Potential impact on your site
Unauthorized users can alter slider content, potentially defacing or corrupting your news display.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
