CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:N
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in WP Chill Image Photo Gallery Final Tiles Grid final-tiles-grid-gallery-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Image Photo Gallery Final Tiles Grid: from n/a through <= 3.6.11.
Explanation of Vulnerability in Simple Terms
Image Photo Gallery Final Tiles Grid versions up to 3.6.11 contain an authorization flaw that allows high-privilege users to access sensitive information they should not see. The vulnerability requires administrator-level access and does not affect data integrity or availability. A patch status is not yet confirmed.
What an attacker can do
Read sensitive information on the site if they have administrator access.
Potential impact on your site
Site administrators with malicious intent or compromised admin accounts can view confidential data.
Conditions required to exploit
Attacker must have administrator-level privileges on the WordPress site.
Key dates
External resources
Related vulnerabilities
