CVSS base score
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
What the vulnerability does
Missing Authorization vulnerability in Ben Balter WP Document Revisions allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Document Revisions: from n/a before 4.0.0.
Explanation of Vulnerability in Simple Terms
WP Document Revisions before version 4.0.0 does not properly check user permissions before allowing access to document revisions. An unauthenticated attacker can read document content and metadata without authorization. Site administrators should update to version 4.0.0 or later immediately.
What an attacker can do
Read document revisions and metadata without logging in or having permission.
Potential impact on your site
Confidential documents stored in WP Document Revisions are exposed to anyone on the internet.
Conditions required to exploit
Network access to the WordPress site; no authentication or user interaction required.
Key dates
External resources
Related vulnerabilities
