CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Javier Casares WPVulnerability wpvulnerability allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPVulnerability: from n/a through <= 4.2.1.
Explanation of Vulnerability in Simple Terms
WPVulnerability versions 4.2.1 and earlier lack proper authorization checks, allowing authenticated users to read sensitive data they should not access. An attacker with a low-privilege account can view confidential information without additional interaction. The vulnerability affects all versions up to 4.2.1; update to version 5.0.1 or later to remediate.
What an attacker can do
Read sensitive data belonging to other users or the site without permission.
Potential impact on your site
Confidential user data or site information may be exposed to authenticated attackers with limited permissions.
Conditions required to exploit
Attacker must have a low-privilege account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
