CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Ajay Contextual Related Posts contextual-related-posts allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Contextual Related Posts: from n/a through < 4.2.2.
Explanation of Vulnerability in Simple Terms
Contextual Related Posts through version 4.2.2 fails to properly check user permissions before allowing access to certain functionality. An attacker without authentication can read sensitive information that should be restricted. The vulnerability requires only network access and no user interaction.
What an attacker can do
Read sensitive information that should be restricted to authorized users.
Potential impact on your site
Unauthorized visitors can access restricted data exposed by the plugin without logging in.
Conditions required to exploit
No authentication or user interaction required; attacker needs only network access.
Key dates
External resources
Related vulnerabilities
