CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Convers Lab WPSubscription subscription allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPSubscription: from n/a through <= 1.8.10.
Explanation of Vulnerability in Simple Terms
WPSubscription versions 1.8.10 and earlier contain an authorization flaw that allows unauthenticated attackers to read sensitive data and make limited changes to the site over the network. No user interaction is required. The vulnerability affects confidentiality and integrity of the application.
What an attacker can do
Read sensitive data and make limited modifications to the site without logging in.
Potential impact on your site
Unauthorized users can access private information and alter site content without credentials.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
