What is the CVSS score of CVE-2025-69032?

CVE-2025-69032 has a CVSS 3.1 base score of 5.4 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L. EPSS exploitation probability: 0.0%.

Fivestar CVE-2025-69032

MEDIUM

Authorization Bypass Through User-Controlled Key (CWE-639)

2025-12-30 audit@patchstack.com

WordPress Authentication Bypass Fivestar Wordpress Theme Qodeinteractive

5.4

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

5.4 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

Low

Availability

Low

Lifecycle Timeline

Analysis Generated

Jul 26, 2026 - 15:46 vuln.today

CVE Published

Dec 30, 2025 - 11:16 cve.org

MEDIUM 5.4

DescriptionCVE.org

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes FiveStar fivestar allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FiveStar: from n/a through <= 1.7.

AnalysisAI

Insecure Direct Object Reference (IDOR) in the FiveStar WordPress theme allows authenticated low-privilege users to modify or delete arbitrary data due to missing authorization checks on user-controlled keys. Versions up to and including 1.7 are affected, and exploitation can lead to integrity and availability impacts without confidentiality loss. No active exploitation or public exploit is currently identified.