What is the CVSS score of CVE-2025-58711?

CVE-2025-58711 has a CVSS 3.1 base score of 5.3 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N. EPSS exploitation probability: 0.1%.

Blog Designer PRO CVE-2025-58711

MEDIUM

Missing Authorization (CWE-862)

2025-10-29 audit@patchstack.com

WordPress Authentication Bypass Wordpress Plugin

5.3

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.3 MEDIUM

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

vuln.today AI

5.3 MEDIUM

Network-reachable WordPress endpoint with no capability check yields AV:N and PR:N; only constrained write-side actions are achievable, so I:L with no C or A impact.

3.1 AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N

Primary rating from NVD.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Jul 25, 2026 - 12:06 vuln.today

DescriptionCVE.org

Missing Authorization vulnerability in solwin Blog Designer PRO blog-designer-pro allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Blog Designer PRO: from n/a through <= 3.4.8.

AnalysisAI

Unauthenticated access control bypass in Blog Designer PRO WordPress plugin (versions through 3.4.8) allows remote attackers to invoke ACL-restricted functionality without holding any WordPress account, resulting in limited unauthorized data modification. The provided CVSS vector confirms the attack is network-accessible with no authentication, no user interaction, and low complexity (AV:N/AC:L/PR:N/UI:N), though impact is bounded to integrity-only modifications with no confidentiality or availability consequence. No public exploit has been identified and EPSS places this at the 18th percentile (0.06%), indicating no observed mass exploitation - this vulnerability is also absent from CISA KEV.

Technical ContextAI

Blog Designer PRO is a premium WordPress plugin developed by solwin that provides advanced blog layout and design customization capabilities for WordPress sites. The root cause is CWE-862 (Missing Authorization), a class of flaws where an application executes privileged operations without first verifying whether the calling user holds the required capability or permission. In WordPress, proper authorization is enforced via capability checks using functions such as current_user_can() combined with nonce verification, typically guarding AJAX actions (wp_ajax_ hooks) or REST API endpoints. The absence of such guards in one or more of the plugin's endpoints allows unauthenticated HTTP requests to reach and trigger functionality intended to be restricted by WordPress role-based ACLs. All versions through and including 3.4.8 are confirmed affected; no CPE string was provided in the NVD entry.

Affected ProductsAI

Blog Designer PRO, developed by solwin, is affected in all versions from an unspecified baseline through and including version 3.4.8. No CPE string was supplied in the NVD data for this entry. Full version confirmation and advisory details are available via the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-8-broken-access-control-vulnerability.

RemediationAI

Update Blog Designer PRO to a version above 3.4.8 as directed by solwin once a patched release is published; no exact fix version has been independently confirmed at the time of this analysis - verify the confirmed patched release through the solwin plugin page or the Patchstack advisory at https://patchstack.com/database/Wordpress/Plugin/blog-designer-pro/vulnerability/wordpress-blog-designer-pro-plugin-3-4-8-broken-access-control-vulnerability before upgrading. As an interim compensating control, temporarily deactivating the plugin removes the exposure entirely at the cost of losing blog design customization features - this is the most reliable short-term mitigation. Alternatively, a web application firewall rule can be configured to block unauthenticated requests to the specific AJAX action or REST route exposed by the plugin, though the exact endpoint identifier has not been publicly disclosed, which limits the precision of this approach and risks false positives if broadly scoped.