CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Link Software LLC WP Terms Popup wp-terms-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Terms Popup: from n/a through <= 2.10.0.
Explanation of Vulnerability in Simple Terms
WP Terms Popup fails to check user permissions before allowing access to sensitive functions. An unauthenticated attacker can read data they should not have access to by making direct requests to the plugin. No user interaction is required. Update to a version newer than 2.10.0.
What an attacker can do
Read sensitive data without authentication by bypassing permission checks.
Potential impact on your site
Unauthorized visitors can access confidential information the plugin stores or manages.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
