CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in patreon Patreon WordPress patreon-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Patreon WordPress: from n/a through <= 1.9.1.
Explanation of Vulnerability in Simple Terms
The Patreon WordPress plugin through version 1.9.1 lacks proper authorization checks, allowing unauthenticated attackers to modify site data. An attacker can send network requests without authentication to trigger unauthorized changes. Site administrators should update the plugin immediately to prevent data tampering.
What an attacker can do
Modify site data without logging in or having permission to do so.
Potential impact on your site
Attackers can alter site content or settings without your knowledge or consent.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
