CVE-2025-23771
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Feb 14, 2025
CWE ID 862
Summary
CVE-2025-23771 is a missing authorization vulnerability affecting Murali Push Notification for Post and BuddyPress. The flaw allows unauthorized access to push notifications when access control security levels are incorrectly configured. This issue can potentially be exploited, and it affects versions of Push Notification for Post and BuddyPress from n/a through 2.11. It is essential for users to update their software and properly configure access control settings to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.