CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
The Download Manager and Payment Form WordPress Plugin – WP SmartPay plugin for WordPress is vulnerable to Insecure Direct Object Reference in versions 1.1.0 to 2.7.13 via the show() function due to missing validation on a user controlled key. This makes it possible for authenticated attackers, with Subscriber-level access and above, to view other user's data like email address, name, and notes.
Explanation of Vulnerability in Simple Terms
WP SmartPay versions 1.1.0 through 2.7.13 expose sensitive information to authenticated users. A logged-in attacker with low privileges can access data they should not be able to view. The vulnerability does not allow data modification or system unavailability. Update to a version newer than 2.7.13.
What an attacker can do
Read sensitive information they should not have access to.
Potential impact on your site
User data or plugin configuration may be visible to low-privilege accounts like subscribers or contributors.
Conditions required to exploit
Attacker must be logged in to the WordPress site with a low-privilege account.
Key dates
External resources
