CVE-2025-1249
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Feb 26, 2025
CWE ID 862
Summary
CVE-2025-1249 is a Missing Authorization vulnerability affecting the Pixelite Events Manager. This issue arises due to incorrectly configured access control security levels, enabling unauthorized exploitation. The vulnerability spans from versions n/a to 6.6.4.1. Unauthenticated attackers can potentially take advantage of this flaw to gain unauthorized access, leading to potential data breaches or system compromise. Organizations using the affected version should apply the necessary patches to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Events Manager plugin
Affected Vendors
- WordPress