GS Insever Portfolio WordPress Plugin Missing Capability Check Vulnerability in CSS Injection
Vulnerability
A vulnerability exists in the GS Insever Portfolio plugin for WordPress, in all versions through 1.4.5. The issue arises from a missing capability check in the save_settings() function, allowing authenticated attackers with Subscriber-level access and above to unauthorizedly modify the plugin's CSS settings.
Impact
Exploitation of this vulnerability allows for unauthorized modification of CSS settings within the GS Insever Portfolio plugin.
Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
0.6exploitability
5.9remediation
0.0relevance
0.0threat
3.2urgency
2.9incentive
1.7Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.