What is the CVSS score of CVE-2025-69030?

CVE-2025-69030 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.0%.

Backpack Traveler CVE-2025-69030

MEDIUM

Authorization Bypass Through User-Controlled Key (CWE-639)

2025-12-30 audit@patchstack.com

WordPress Authentication Bypass Backpack Traveler Wordpress Theme Qodeinteractive

5.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:46 vuln.today

CVE Published

Dec 30, 2025 - 11:16 cve.org

MEDIUM 5.4

DescriptionCVE.org

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes Backpack Traveler backpacktraveler allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Backpack Traveler: from n/a through <= 2.10.3.

AnalysisAI

Insecure direct object references in the Backpack Traveler WordPress theme (versions <= 2.10.3) allow authenticated attackers with low privileges to modify or disrupt resources belonging to other users by manipulating access control keys. The vulnerability does not permit reading of data, only partial integrity and availability impact. EPSS exploitation probability is very low (0.04%) and no active exploitation or public exploit code is confirmed.