CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in WPManiax WP DB Booster wp-db-booster allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP DB Booster: from n/a through <= 1.0.1.
Explanation of Vulnerability in Simple Terms
WP DB Booster through version 1.0.1 fails to properly check user permissions before allowing access to certain database operations. A logged-in user with low privileges can read sensitive database information or disrupt site availability without proper authorization checks. Update to a version newer than 1.0.1.
What an attacker can do
Read sensitive database information or cause temporary site disruption.
Potential impact on your site
Unauthorized users can access database contents and potentially cause availability issues.
Conditions required to exploit
Attacker must be logged in to the WordPress site with a low-privilege account.
Key dates
External resources
Related vulnerabilities
