AA Web Servant Missing Authorization Vulnerability in 12 Step Meeting List Plugin

Vulnerability

A missing authorization vulnerability has been identified in the AA Web Servant 12 Step Meeting List plugin, affecting versions through 3.16.5. This vulnerability allows exploitation of improperly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized changes in settings, allowing attackers to manipulate configuration options of the affected plugin.

Remediation

Users of the 12 Step Meeting List WordPress plugin should update to version 3.16.6 or later. Patchstack users can enable auto-updates for vulnerable plugins.

Added: Jun 9, 2025, 7:46 PM
Updated: Jun 9, 2025, 7:46 PM

Vulnerability Rating

Custom Algorithm
spread
1.0
impact
5.0
exploitability
7.6
remediation
7.7
relevance
0.0
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.