CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in etruel WP Views Counter wpecounter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Views Counter: from n/a through <= 2.1.2.
Explanation of Vulnerability in Simple Terms
WP Views Counter versions 2.1.2 and earlier lack proper authorization checks, allowing unauthenticated attackers to modify data on the site. An attacker can send network requests without authentication to alter information tracked or stored by the plugin. The vulnerability requires no user interaction and affects the integrity of plugin data.
What an attacker can do
Modify data stored or tracked by the WP Views Counter plugin without authentication.
Potential impact on your site
Attackers can alter view counts, statistics, or other data managed by WP Views Counter without logging in.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
