CVE-2025-3059
CVSS 3.1 Score 8.5 of 10 (high)
Details
Published Mar 31, 2025
Updated: Apr 1, 2025
CWE ID 89
Summary
CVE-2025-3059 is a newly disclosed vulnerability affecting the Drupal Profile Private module. This issue resides within the module version affecting profiles marked with an asterisk. A successful exploit could result in arbitrary code execution, potentially allowing attackers to gain unauthorized access or execute malicious actions on vulnerable systems. System administrators are encouraged to update to the patched version of the module as soon as possible to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress