CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
What the vulnerability does
Missing Authorization vulnerability in AdAstraCrypto Cryptocurrency Donation Box – Bitcoin & Crypto Donations cryptocurrency-donation-box allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cryptocurrency Donation Box – Bitcoin & Crypto Donations: from n/a through <= 2.2.13.
Explanation of Vulnerability in Simple Terms
The Cryptocurrency Donation Box plugin for WordPress contains a missing authorization flaw that allows unauthenticated attackers to modify data on the site. An attacker can send network requests to alter donation settings or records without needing valid credentials. This affects all versions up to 2.2.13. Site owners should update immediately to a patched version.
What an attacker can do
Modify donation box settings or records without logging in.
Potential impact on your site
Attackers can alter your donation configuration, potentially redirecting funds or disabling the donation feature.
Conditions required to exploit
Network access only; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
