CVE-2025-31843
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 862
Summary
CVE-2025-31843 is a critical vulnerability affecting the Wilson OpenAI Tools for WordPress and WooCommerce. This Missing Authorization issue arises due to incorrectly configured access control security levels, which can be exploited. The flaw enables unauthorized access and potential data manipulation, affecting all versions of OpenAI Tools for WordPress and WooCommerce from n/a through 2.1.5. Immediate remediation is recommended to prevent potential security breaches.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress