CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in AA Web Servant 12 Step Meeting List 12-step-meeting-list allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects 12 Step Meeting List: from n/a through <= 3.16.5.
Explanation of Vulnerability in Simple Terms
The 12 Step Meeting List plugin for WordPress fails to properly check user permissions before allowing certain actions. A logged-in user with low privileges can disrupt the availability of the site by performing operations they should not be able to access. The vulnerability affects versions up to 3.16.5.
What an attacker can do
A logged-in user can perform unauthorized actions that disrupt site availability.
Potential impact on your site
Authenticated users can cause denial of service or data disruption without proper authorization.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
