CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in averta Shortcodes and extra features for Phlox theme auxin-elements allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Shortcodes and extra features for Phlox theme: from n/a through <= 2.17.15.
Explanation of Vulnerability in Simple Terms
The Shortcodes and extra features for Phlox theme contains an authorization bypass that allows authenticated users with low privileges to modify content they should not have access to. The vulnerability affects all versions up to 2.17.15. An attacker with a basic user account can alter site data without proper permission checks. Update to a version newer than 2.17.15 to resolve this issue.
What an attacker can do
Modify site content or settings without proper authorization as a low-privilege user.
Potential impact on your site
Unauthorized users can alter your site's content, potentially defacing pages or changing settings.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
