CVE-2025-23773
CVSS 3.1 Score 6.5 of 10 (medium)
Details
Published Apr 17, 2025
CWE ID 862
Summary
CVE-2025-23773 is a critical vulnerability affecting the Delete All Posts plugin for mingocommerce. The issue stems from a missing authorization check, allowing unauthorized access to delete all posts. Exploitation of this flaw is possible when access control security levels are incorrectly configured. The vulnerable version range is from n/a to 1.1.1. This vulnerability poses a significant risk, as it can lead to data loss or unintended modifications. System administrators should update the plugin as soon as possible to mitigate this threat.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.