CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in jgwhite33 WP Google Review Slider wp-google-places-review-slider allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Google Review Slider: from n/a through <= 17.4.
Explanation of Vulnerability in Simple Terms
WP Google Review Slider versions 17.4 and earlier lack proper authorization checks, allowing authenticated users with low privileges to modify or delete data. An attacker with a basic user account can change site content or disable functionality without proper permission controls. Update to a version newer than 17.4 to restore access restrictions.
What an attacker can do
Modify or delete site data using a low-privilege user account.
Potential impact on your site
Unauthorized users can alter or remove reviews, slider settings, or other plugin data without admin approval.
Conditions required to exploit
Attacker needs a valid WordPress user account with low privileges; no special user interaction required.
Key dates
External resources
Related vulnerabilities
