CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Plugin Devs Post Carousel Slider for Elementor post-carousel-slider-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Post Carousel Slider for Elementor: from n/a through <= 1.7.0.
Explanation of Vulnerability in Simple Terms
Post Carousel Slider for Elementor versions up to 1.7.0 lack proper authorization checks, allowing authenticated users to read sensitive data they should not access. An attacker with a low-privilege account can retrieve confidential information without additional interaction. Site administrators should update to a version newer than 1.7.0 to prevent unauthorized data exposure.
What an attacker can do
Read sensitive data from the site that their account should not access.
Potential impact on your site
Confidential information may be exposed to any logged-in user, including subscriber-level accounts.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
