CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in WC Lovers WCFM – Frontend Manager for WooCommerce wc-frontend-manager allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WCFM – Frontend Manager for WooCommerce: from n/a through <= 6.7.24.
Explanation of Vulnerability in Simple Terms
WCFM – Frontend Manager for WooCommerce versions up to 6.7.24 contain an authorization bypass that allows high-privilege users to cause a denial of service. The vulnerability stems from missing authorization checks on certain administrative functions. An attacker with high-level site access can trigger the flaw to temporarily disrupt site availability.
What an attacker can do
Cause temporary unavailability of the site by triggering a denial-of-service condition.
Potential impact on your site
Site administrators or malicious insiders can temporarily take the site offline without leaving obvious audit trails.
Conditions required to exploit
Attacker must have high-level administrative privileges on the WordPress site.
Key dates
External resources
