CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.8.0.
Explanation of Vulnerability in Simple Terms
Coupon Affiliates through version 6.8.0 lacks proper authorization checks, allowing high-privilege users to access or modify sensitive functionality they should not have permission to use. The vulnerability affects confidentiality, integrity, and availability with low impact. Attack complexity is high, suggesting exploitation requires specific conditions or configuration.
What an attacker can do
A high-privilege user can access or modify restricted functionality beyond their intended permissions.
Potential impact on your site
Privileged users (e.g., administrators) may be able to perform unauthorized actions affecting data or site operations.
Conditions required to exploit
Attacker must have high-level privileges on the site; no user interaction required.
Key dates
External resources
