CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in sminozzi Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin real-estate-right-now allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Real Estate Property 2024 Create Your Own Fields and Search Bar WP Plugin: from n/a through <= 4.48.
Explanation of Vulnerability in Simple Terms
The Real Estate Property 2024 plugin for WordPress versions 4.48 and earlier lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability does not affect site availability or expose sensitive information, but allows unauthorized changes to site content or settings.
What an attacker can do
Modify data or settings they should not have permission to change.
Potential impact on your site
Unauthorized users may alter property listings, custom fields, or plugin settings without admin approval.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., subscriber or contributor).
Key dates
External resources
Related vulnerabilities
