CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
What the vulnerability does
Missing Authorization vulnerability in bPlugins Parallax Section block parallax-section allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Parallax Section block: from n/a through <= 1.0.9.
Explanation of Vulnerability in Simple Terms
The Parallax Section block plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to modify site content and disrupt service. An attacker with a basic user account can bypass permission checks to alter parallax section settings and cause the site to become unavailable. Update to a version newer than 1.0.9 to resolve this issue.
What an attacker can do
Modify parallax section content and crash the site, even with a basic user account.
Potential impact on your site
Unauthorized users can deface content and trigger denial of service without admin intervention.
Conditions required to exploit
Attacker must have a low-privilege WordPress user account (e.g., Contributor or Subscriber).
Key dates
External resources
Related vulnerabilities
