CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in WPWebinarSystem WebinarPress wp-webinarsystem allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WebinarPress: from n/a through <= 1.33.28.
Explanation of Vulnerability in Simple Terms
WebinarPress versions up to 1.33.28 lack proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker with a basic user account can make requests that degrade site availability. The vulnerability requires valid login credentials but no special interaction from other users.
What an attacker can do
Degrade site availability by making authenticated requests that consume resources or cause service disruption.
Potential impact on your site
Authenticated users can launch denial-of-service attacks against your site, potentially making it slow or unavailable.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site; no user interaction required.
Key dates
External resources
