CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
What the vulnerability does
Authentication Bypass Using an Alternate Path or Channel vulnerability in Themepaste Admin Safety Guard admin-safety-guard allows Password Recovery Exploitation.This issue affects Admin Safety Guard: from n/a through <= 1.2.6.
Explanation of Vulnerability in Simple Terms
Admin Safety Guard versions 1.2.6 and earlier contain an authentication bypass vulnerability. An attacker can exploit this flaw to gain unauthorized access to administrative functions without valid credentials. The vulnerability allows reading sensitive data, modifying site content, and disrupting service availability. Immediate patching is required.
What an attacker can do
Bypass authentication to access admin functions, read sensitive data, modify content, and disrupt the site.
Potential impact on your site
Attackers can take full control of admin functions without a valid password, compromising site security and data.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
