CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in raratheme Preschool and Kindergarten preschool-and-kindergarten allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Preschool and Kindergarten: from n/a through <= 1.2.5.
Explanation of Vulnerability in Simple Terms
The Preschool and Kindergarten theme for WordPress contains an authorization flaw that allows unauthenticated attackers to modify content on the site. The vulnerability affects versions up to 1.2.5 and requires no special setup or user interaction to exploit. Site administrators should update to a version newer than 1.2.5 immediately.
What an attacker can do
Modify site content without authentication.
Potential impact on your site
Attackers can alter pages, posts, or theme settings without logging in.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
