Clickcease Click Fraud Protection
Monthly
Missing authorization in the ClickCease Click Fraud Protection WordPress plugin, versions through 3.3.0, allows remote unauthenticated attackers to reach a plugin feature that lacks an access-control/capability check, resulting in a bounded integrity impact with no confidentiality loss and no availability impact. The CVSS 3.1 base score is 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, so no privileges and no user interaction are required, but the scope of what an attacker can change is limited (I:L). No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV; the specific endpoint or action missing the check is not described in the available sources.
Missing authorization in the ClickCease Click Fraud Protection WordPress plugin, versions through 3.3.0, allows remote unauthenticated attackers to reach a plugin feature that lacks an access-control/capability check, resulting in a bounded integrity impact with no confidentiality loss and no availability impact. The CVSS 3.1 base score is 5.3 (Medium) with vector AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N, so no privileges and no user interaction are required, but the scope of what an attacker can change is limited (I:L). No public exploit code has been identified at time of analysis, and the issue is not listed in CISA KEV; the specific endpoint or action missing the check is not described in the available sources.