CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in blazethemes News Kit Elementor Addons news-kit-elementor-addons allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects News Kit Elementor Addons: from n/a through <= 1.3.4.
Explanation of Vulnerability in Simple Terms
News Kit Elementor Addons versions 1.3.4 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or delete content they should not have access to. The vulnerability affects the plugin's core functionality and requires a valid user account to exploit. Site administrators should update to a version newer than 1.3.4 as soon as possible.
What an attacker can do
Modify or delete site content without proper authorization.
Potential impact on your site
Unauthorized users can alter or remove published content, potentially disrupting site operations.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
