WPChill Htaccess File Editor Broken Authentication Vulnerability

Vulnerability

A broken authentication vulnerability has been identified in the WPChill Htaccess File Editor plugin, affecting versions through 1.0.19. This vulnerability allows attackers to exploit improperly configured access control, potentially performing actions reserved for higher-privileged users.

Impact

Exploitation of this vulnerability could enable a malicious actor to execute actions that should only be available to users with higher privileges, possibly leading to gaining admin access on the website.

Remediation

Users of the WPChill Htaccess File Editor plugin should update to version 1.0.20 or later to address this vulnerability.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
5.0
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.