CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in QuanticaLabs CSS3 Compare Pricing Tables for WordPress css3_web_pricing_tables_grids allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CSS3 Compare Pricing Tables for WordPress: from n/a through <= 11.6.
Explanation of Vulnerability in Simple Terms
The CSS3 Compare Pricing Tables plugin for WordPress does not properly check user permissions before allowing modifications to pricing table data. A logged-in user with low privileges can alter or delete pricing tables they should not have access to. The plugin does not validate authorization on sensitive operations, allowing privilege escalation within the site.
What an attacker can do
A low-privilege logged-in user can modify or delete pricing tables belonging to other users or the site.
Potential impact on your site
Pricing table data can be corrupted or deleted by users who should only have view access, disrupting site functionality and content integrity.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Subscriber or Contributor role).
Key dates
External resources
Related vulnerabilities
