CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Black and White WP Genealogy – Your Family History Website wpgenealogy allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Genealogy – Your Family History Website: from n/a through <= 0.1.9.
Explanation of Vulnerability in Simple Terms
WP Genealogy versions 0.1.9 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data on the site. An attacker can send network requests without logging in to alter genealogy records or other content. The vulnerability affects the plugin's core functionality and requires no special setup to exploit.
What an attacker can do
Modify genealogy records and other site data without logging in.
Potential impact on your site
Genealogy records and other content can be altered by anyone on the internet without permission.
Conditions required to exploit
Network access to the site; no authentication or user interaction required.
Key dates
External resources
