CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in Wptexture Image Slider Slideshow image-slider-slideshow allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Slider Slideshow: from n/a through <= 1.8.
Explanation of Vulnerability in Simple Terms
The Image Slider Slideshow plugin for WordPress contains an authorization flaw that allows authenticated users with low privileges to modify content they should not have access to. The vulnerability affects versions up to 1.8 and requires a valid user account to exploit. Site administrators should update to a version newer than 1.8 to mitigate this risk.
What an attacker can do
Modify or alter slider content without proper authorization.
Potential impact on your site
Unauthorized users can alter slider images or settings, potentially defacing or disrupting site content.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
