CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in echoplugins Knowledge Base for Documentation, FAQs with AI Assistance echo-knowledge-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Knowledge Base for Documentation, FAQs with AI Assistance: from n/a through <= 16.011.0.
Explanation of Vulnerability in Simple Terms
The Knowledge Base for Documentation, FAQs with AI Assistance plugin for WordPress contains an authorization flaw that allows authenticated users to modify content they should not have access to. An attacker with a low-privilege account can change data without proper permission checks. The vulnerability affects versions up to 16.011.0 and requires a valid user login to exploit.
What an attacker can do
Modify or alter knowledge base content and documentation without proper authorization.
Potential impact on your site
Unauthorized users can alter your knowledge base, FAQs, and documentation, potentially spreading misinformation or disrupting site content.
Conditions required to exploit
Attacker must have a valid low-privilege user account on the site.
Key dates
External resources
Related vulnerabilities
