Rentsyst
Monthly
Missing authorization in the Rentsyst WordPress rental plugin (≤2.1.2) permits unauthenticated remote attackers to access restricted endpoints or functionality without any capability checks. The CVSS vector (PR:N, C:L, I:N, A:N) confirms the flaw exposes read-only data to network-reachable, unauthenticated requesters, with no integrity or availability consequence. No public exploit code or CISA KEV listing has been identified at the time of analysis.
Missing authorization in the Rentsyst WordPress rental plugin (≤2.1.2) permits unauthenticated remote attackers to access restricted endpoints or functionality without any capability checks. The CVSS vector (PR:N, C:L, I:N, A:N) confirms the flaw exposes read-only data to network-reachable, unauthenticated requesters, with no integrity or availability consequence. No public exploit code or CISA KEV listing has been identified at the time of analysis.