Hera-User

Incorrectly configured access control security levels allow unauthenticated attackers to perform unauthorized actions. This is caused by a missing capability check within a function, leading to a missing authorization flaw.

A missing authorization issue exists due to a lack of capability checks in a function. This allows authenticated users with customer-level access or higher to exploit incorrectly configured access control security levels and perform unauthorized actions.

The plugin contains a missing authorization flaw resulting from an incorrectly configured access control security level. Specifically, a missing capability check in a function allows unauthenticated attackers to perform unauthorized actions.

Cross-Site Request Forgery (CSRF) occurs when an attacker tricks a victim into performing an action they did not intend to do. This issue is caused by missing or incorrect nonce validation on a function, allowing unauthenticated attackers to execute unauthorized actions by tricking a site administrator into clicking a malicious link.

The plugin contains a missing authorization flaw resulting from an incorrectly configured access control security level. Specifically, a missing capability check in a function allows unauthenticated attackers to perform unauthorized actions.

The myCred plugin for WordPress contains a missing authorization flaw resulting from a missing capability check in a function. This allows authenticated attackers with subscriber-level access or higher to exploit incorrectly configured access control security levels and perform unauthorized actions.

An issue exists where authenticated users with subscriber-level access and above can read arbitrary files on the server. This is possible through a directory traversal flaw involving the `vanupfi file name` parameter. The flaw occurs because providing a non-existent order ID causes the `wc get order()` function to return false, bypassing the `vanupfi user can access order files()` authorization check. Additionally, a loose substring match in the `is pdf()` branch selector allows a traversal payload to be processed and streamed via the `readfile()` function.

The plugin allows the retrieval of embedded sensitive data due to the insertion of sensitive information into an externally-accessible file or directory. This enables unauthenticated attackers to extract sensitive user or configuration data.

Incorrectly configured access control security levels allow unauthenticated attackers to perform unauthorized actions. This is caused by a missing capability check in a function, which leads to missing authorization.