WPChill Htaccess File Editor
cpe:2.3:a:wpchill:htaccess_file_editor:*:*:*:*:wordpress:*:*
- <= 1.0.19
A broken authentication vulnerability has been identified in the WPChill Htaccess File Editor plugin, affecting versions through 1.0.19. This vulnerability allows attackers to exploit improperly configured access control, potentially performing actions reserved for higher-privileged users.
Exploitation of this vulnerability could enable a malicious actor to execute actions that should only be available to users with higher privileges, possibly leading to gaining admin access on the website.
Users of the WPChill Htaccess File Editor plugin should update to version 1.0.20 or later to address this vulnerability.
Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.