CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in StellarWP Gutenberg Blocks by Kadence Blocks kadence-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Gutenberg Blocks by Kadence Blocks: from n/a through <= 3.3.1.
Explanation of Vulnerability in Simple Terms
Kadence Blocks, a WordPress block editor plugin by StellarWP, fails to properly check user permissions before allowing certain actions. A logged-in user with low privileges can modify content they should not have access to. The vulnerability affects versions up to 3.3.1. Update to a version newer than 3.3.1 to resolve this issue.
What an attacker can do
Modify or alter content without proper authorization.
Potential impact on your site
Unauthorized users can alter site content, potentially defacing pages or injecting malicious material.
Conditions required to exploit
Attacker must have a low-privilege WordPress account (e.g., contributor or subscriber).
Key dates
External resources
Related vulnerabilities
