CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in raratheme The Conference the-conference allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Conference: from n/a through <= 1.2.5.
Explanation of Vulnerability in Simple Terms
The Conference theme for WordPress contains a missing authorization check that allows unauthenticated attackers to modify content on the site. An attacker can send a network request to alter data without needing to log in or interact with a user. This affects all versions up to and including 1.2.5. Site administrators should update to a version newer than 1.2.5.
What an attacker can do
Modify site content without authentication.
Potential impact on your site
Attackers can alter your site's content, pages, or settings without a password.
Conditions required to exploit
Network access only; no login or user interaction required.
Key dates
External resources
Related vulnerabilities
