CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4.
Explanation of Vulnerability in Simple Terms
WPKoi Templates for Elementor versions up to 3.4.4 lack proper authorization checks, allowing authenticated users to modify content they should not have access to. An attacker with a low-privilege account can alter data without the site owner's permission. Update to a version newer than 3.4.4 to resolve this issue.
What an attacker can do
Modify content or settings they lack permission to change.
Potential impact on your site
Unauthorized users can alter your site's content, pages, or template settings.
Conditions required to exploit
Attacker must have a low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
