CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Embed360 Embed and Integrate Etsy Shop embed-and-integrate-etsy-shop allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Embed and Integrate Etsy Shop: from n/a through <= 1.0.8.
Explanation of Vulnerability in Simple Terms
The Embed and Integrate Etsy Shop plugin through version 1.0.8 lacks proper authorization checks, allowing unauthenticated attackers to modify data via the network. No authentication or user interaction is required to exploit this vulnerability. Site administrators should update to a version newer than 1.0.8 as soon as possible.
What an attacker can do
Modify data on the site without logging in or any user interaction.
Potential impact on your site
Unauthorized changes to site data, potentially affecting Etsy shop integration or product listings.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
