Wp Social Avatar
Monthly
Broken access control in WP Social Avatar WordPress plugin (versions ≤ 1.5) exposes one or more plugin endpoints to unauthenticated remote attackers, who can perform restricted operations without valid credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network-accessible exploitation with no credentials or user interaction required, with consequences limited to low-severity integrity and availability impact and no confidentiality exposure. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog.
Broken access control in WP Social Avatar WordPress plugin (versions ≤ 1.5) exposes one or more plugin endpoints to unauthenticated remote attackers, who can perform restricted operations without valid credentials. The CVSS vector (AV:N/AC:L/PR:N/UI:N) confirms network-accessible exploitation with no credentials or user interaction required, with consequences limited to low-severity integrity and availability impact and no confidentiality exposure. No public exploit code has been identified at time of analysis, and the vulnerability does not appear in the CISA Known Exploited Vulnerabilities catalog.