CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in bPlugins Animated Text Block animated-text-block allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Animated Text Block: from n/a through <= 1.0.7.
Explanation of Vulnerability in Simple Terms
Animated Text Block for WordPress contains an authorization flaw that allows authenticated users with low privileges to read sensitive data they should not access. The vulnerability affects versions up to 1.0.7. An attacker with a basic user account can retrieve confidential information without additional interaction. Site administrators should update to a patched version when available.
What an attacker can do
Read sensitive data accessible only to higher-privilege users.
Potential impact on your site
Confidential site data may be exposed to low-privilege users who should not have access.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
