Outranking Plugin Options
Monthly
Unauthenticated broken access control in the Outranking Plugin Options WordPress plugin (versions 1.1.3 and below) allows remote unauthenticated attackers to modify plugin options, resulting in high integrity impact. The root cause is CWE-862 (Missing Authorization), meaning the plugin fails to verify whether the requesting user has permission before processing option-change requests. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the CVSS:3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N reflects a low-barrier, fully network-exploitable condition.
Unauthenticated broken access control in the Outranking Plugin Options WordPress plugin (versions 1.1.3 and below) allows remote unauthenticated attackers to modify plugin options, resulting in high integrity impact. The root cause is CWE-862 (Missing Authorization), meaning the plugin fails to verify whether the requesting user has permission before processing option-change requests. No public exploit code has been identified at time of analysis, and the vulnerability is not listed in the CISA KEV catalog, though the CVSS:3.1 vector of AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N reflects a low-barrier, fully network-exploitable condition.