CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Missing Authorization vulnerability in InstaWP InstaWP Connect instawp-connect allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects InstaWP Connect: from n/a through <= 0.1.2.5.
Explanation of Vulnerability in Simple Terms
InstaWP Connect versions up to 0.1.2.5 lack proper authorization checks, allowing authenticated users to modify site data without appropriate permissions. An attacker with low-level access can alter content or disable features. Update to a version newer than 0.1.2.5 to resolve this issue.
What an attacker can do
Modify or disable site content and features without proper authorization.
Potential impact on your site
Authenticated users can alter your site's data or disable features beyond their intended permissions.
Conditions required to exploit
Attacker must have a low-level user account on the site.
Key dates
External resources
Related vulnerabilities
