Aws S3 For Wordpress Plugin Upcasted
Monthly
Missing authorization checks in the Upcasted S3 Offload plugin (published as 'AWS S3 for WordPress Plugin - Upcasted') through version 3.1.0 let any authenticated user holding only the Subscriber role invoke plugin functionality that should be reserved for higher-privileged accounts, yielding limited confidentiality, integrity, and availability impact rather than full site takeover. The attack is network-reachable and requires no user interaction, but the PR:L rating means an attacker must first possess a valid low-privilege WordPress account - most commonly obtained through open or self-service user registration - which is the principal limiting factor on real-world exposure. There is no public exploit code identified at time of analysis and no indication of active exploitation, and the moderate CVSS score of 6.3 reflects the constrained, low-impact actions that the missing check exposes.
Missing authorization checks in the Upcasted S3 Offload plugin (published as 'AWS S3 for WordPress Plugin - Upcasted') through version 3.1.0 let any authenticated user holding only the Subscriber role invoke plugin functionality that should be reserved for higher-privileged accounts, yielding limited confidentiality, integrity, and availability impact rather than full site takeover. The attack is network-reachable and requires no user interaction, but the PR:L rating means an attacker must first possess a valid low-privilege WordPress account - most commonly obtained through open or self-service user registration - which is the principal limiting factor on real-world exposure. There is no public exploit code identified at time of analysis and no indication of active exploitation, and the moderate CVSS score of 6.3 reflects the constrained, low-impact actions that the missing check exposes.