Headline Analyzer, 1a06b2d9fafa72a3ffd3da92198a28b07fd3b87d

CVE, Research URL: 1a06b2d9fafa72a3ffd3da92198a28b07fd3b87d
Home page URL: Security reports for Headline Analyzer
Application: Headline Analyzer
Published on: Oct 18, 2023
Research Description: Headline Analyzer [headline-analyzer] < 1.3.2 WordPress Headline Analyzer Plugin <= 1.3.1 is vulnerable to Broken Access Control No patched version is available. Mika discovered and reported this Broken Access Control vulnerability in WordPress Headline Analyzer Plugin. A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.
Affected versions: max 1.3.2.
Status: vulnerable