CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in theme funda Setup Default Featured Image setup-default-feature-image allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Setup Default Featured Image: from n/a through <= 1.2.
Explanation of Vulnerability in Simple Terms
Setup Default Featured Image versions 1.2 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify site content. An attacker can change or delete featured images without logging in. The vulnerability requires only network access and no user interaction. Site administrators should update to a version newer than 1.2 immediately.
What an attacker can do
Modify or delete featured images on the site without authentication.
Potential impact on your site
Attackers can deface or remove featured images from posts and pages without your permission.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
