CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in WP Chill Strong Testimonials strong-testimonials allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Strong Testimonials: from n/a through <= 3.2.3.
Explanation of Vulnerability in Simple Terms
Strong Testimonials through version 3.2.3 does not properly check permissions before allowing certain actions. An unauthenticated attacker can modify data on the site without authorization. The vulnerability requires only network access and no user interaction. Site administrators should update to a version newer than 3.2.3.
What an attacker can do
Modify site data without logging in or having permission to do so.
Potential impact on your site
Unauthorized changes to testimonials or plugin data without admin approval or audit trail.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
