CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in wptasker WordPress Graphs & Charts graph-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress Graphs & Charts: from n/a through <= 2.0.8.
Explanation of Vulnerability in Simple Terms
The WordPress Graphs & Charts plugin through version 2.0.8 lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify or delete chart data without proper permission validation. The vulnerability does not expose sensitive information but allows unauthorized changes to site content.
What an attacker can do
A logged-in user can modify or delete chart data without proper authorization.
Potential impact on your site
Unauthorized users can alter or remove charts and their data, disrupting site content and user experience.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
