CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
What the vulnerability does
Authorization Bypass Through User-Controlled Key vulnerability in wpstream WpStream wpstream allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WpStream: from n/a through < 4.11.2.
Explanation of Vulnerability in Simple Terms
WpStream versions up to 4.11.2 contain an authorization flaw that allows authenticated users to modify data or disrupt service availability. An attacker with low-level account access can exploit this without user interaction. The vulnerability does not expose sensitive information but can compromise data integrity and site stability. Update to version 4.12.3 or later.
What an attacker can do
Modify site data or cause temporary unavailability without elevated privileges.
Potential impact on your site
Authenticated users can alter content or disrupt service; data integrity and uptime at risk.
Conditions required to exploit
Attacker must have a low-level user account on the site; no user interaction required.
Key dates
External resources
Related vulnerabilities
