CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in WP Messiah Safe Ai Malware Protection for WP safe-ai-malware-protection-for-wp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Safe Ai Malware Protection for WP: from n/a through <= 1.0.20.
Explanation of Vulnerability in Simple Terms
Safe Ai Malware Protection for WP versions 1.0.20 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify site data or disrupt service. An attacker needs a valid WordPress account to exploit this vulnerability. Site administrators should update to a version newer than 1.0.20 and review user permissions.
What an attacker can do
Modify site data or cause service disruption with a low-privilege WordPress account.
Potential impact on your site
Unauthorized users can alter content or cause downtime; review all user accounts and update immediately.
Conditions required to exploit
Attacker must have a valid low-privilege WordPress user account; no user interaction required.
Key dates
External resources
