CVE-2025-24750
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Jan 24, 2025
CWE ID 862
Summary
CVE-2025-24750 is a missing authorization vulnerability affecting ExactMetrics, a plugin used by WordPress websites. The issue lies in the ExactMetrics software, which fails to properly enforce access control security levels. This weakness enables unauthorized access, potentially allowing attackers to exploit incorrectly configured settings and gain privileged access to affected sites. The vulnerability affects ExactMetrics versions from n/a through 8.1.0, making it crucial for users to upgrade to a secure version as soon as possible.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.