CVE-2025-2104
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Mar 13, 2025
CWE ID 862
Summary
CVE-2025-2104 is a vulnerability affecting the Pagelayer plugin for WordPress, which is used as a drag-and-drop website builder. The issue lies in the insufficient validation of the pagelayer_save_content() function, present in all versions up to 1.9.8. This vulnerability enables authenticated attackers, even those with Contributor-level access, to bypass post moderation and publish unauthorized content on affected websites.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- Softaculous