CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
What the vulnerability does
Missing Authorization vulnerability in BinaryCarpenter Woo Slider Pro woo-slider-pro-drag-drop-slider-builder-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Woo Slider Pro: from n/a through <= 1.12.
Explanation of Vulnerability in Simple Terms
Woo Slider Pro versions 1.12 and earlier lack proper authorization checks, allowing authenticated users with low privileges to disrupt site availability. An attacker with a basic user account can trigger a denial-of-service condition without requiring user interaction. Site administrators should update to a version newer than 1.12 to restore proper access controls.
What an attacker can do
An authenticated user can make the site unavailable or unresponsive.
Potential impact on your site
Your site may become slow or unavailable if an authenticated user exploits this flaw.
Conditions required to exploit
Attacker needs a low-privilege user account on the site (e.g., subscriber or contributor role).
Key dates
External resources
Related vulnerabilities
