EUVD-2025-201513

| CVE-2025-12505 MEDIUM
2025-12-06 [email protected]
Authentication Bypass WordPress PHP
5.4
CVSS 3.1
Share

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
None

Lifecycle Timeline

3
Analysis Generated
Mar 15, 2026 - 17:37 vuln.today
EUVD ID Assigned
Mar 15, 2026 - 17:37 euvd
EUVD-2025-201513
CVE Published
Dec 06, 2025 - 05:16 nvd
MEDIUM 5.4

DescriptionNVD

The weDocs plugin for WordPress is vulnerable to unauthorized access in all versions up to, and including, 2.1.14. This is due to the plugin not properly verifying that a user is authorized to perform an action in the create_item_permissions_check function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to modify global plugin settings.

AnalysisAI

A security vulnerability in for WordPress is vulnerable to unauthorized access in all (CVSS 5.4). Remediation should follow standard vulnerability management procedures.

Technical ContextAI

CWE-285 (Improper Authorization). Affects for WordPress is vulnerable to unauthorized access in all.

RemediationAI

Monitor vendor channels for patch availability.

Share

EUVD-2025-201513 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy