CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thim Elementor Kit: from n/a through <= 1.3.3.
Explanation of Vulnerability in Simple Terms
Thim Elementor Kit versions up to 1.3.3 contain an authorization flaw that allows authenticated users to modify data they should not have access to. An attacker with a low-privilege account can alter content or settings through the plugin's interface. The vulnerability requires an existing user account but no additional user interaction. Update to a version newer than 1.3.3 to resolve this issue.
What an attacker can do
Modify or alter data in the plugin that their account should not have permission to change.
Potential impact on your site
Unauthorized users can alter plugin settings or content, potentially affecting site appearance or functionality.
Conditions required to exploit
Attacker must have a low-privilege user account on the site; no special interaction required.
Key dates
External resources
