CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
What the vulnerability does
The Splitit plugin for WordPress is vulnerable to unauthorized modification of data due to missing capability checks on several functions in the 'splitIt-flexfields-payment-gateway.php' file in all versions up to, and including, 4.2.8. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change plugin settings, including changing the environment from sandbox to production and vice versa.
Explanation of Vulnerability in Simple Terms
Splitit versions up to 4.2.8 lack proper authorization checks, allowing authenticated users to read and modify data they should not have access to. An attacker with a low-privilege account can view or alter sensitive information belonging to other users or accounts. The vulnerability requires valid login credentials but no additional user interaction.
What an attacker can do
Read and modify data belonging to other users or accounts without proper authorization.
Potential impact on your site
User data and account information may be exposed to or modified by other authenticated users.
Conditions required to exploit
Attacker must have a valid low-privilege account on the Splitit system.
Key dates
External resources
