CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
What the vulnerability does
Missing Authorization vulnerability in Iulia Cazan Latest Post Shortcode latest-post-shortcode allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Latest Post Shortcode: from n/a through <= 14.2.0.
Explanation of Vulnerability in Simple Terms
Latest Post Shortcode through version 14.2.0 lacks proper authorization checks, allowing authenticated users with low privileges to trigger a denial-of-service condition. An attacker can make repeated requests to degrade site availability. The vulnerability requires a valid user account but no special interaction from victims.
What an attacker can do
Authenticated user can make requests that degrade site availability.
Potential impact on your site
Site availability may be degraded if a low-privilege user makes repeated requests.
Conditions required to exploit
Attacker must have a valid WordPress user account with low privileges.
Key dates
External resources
Related vulnerabilities
