CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in Jeroen Schmit Theater for WordPress theatre allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Theater for WordPress: from n/a through <= 0.19.
Explanation of Vulnerability in Simple Terms
The Theater for WordPress plugin through version 0.19 lacks proper authorization checks on certain functions. A logged-in user with low privileges can modify data they should not have access to. The vulnerability requires an active WordPress account but no special permissions. Site administrators should update to a version newer than 0.19.
What an attacker can do
A logged-in user can modify data they lack authorization to change.
Potential impact on your site
Unauthorized users can alter site content or settings they should not be able to modify.
Conditions required to exploit
Attacker must have a valid WordPress user account with low privileges.
Key dates
External resources
Related vulnerabilities
