CVE-2025-31848
CVSS 3.1 Score 5.3 of 10 (medium)
Details
Published Apr 1, 2025
CWE ID 862
Summary
CVE-2025-31848 is a newly discovered vulnerability affecting the WPFactory WordPress Adverts Plugin. This missing authorization issue stems from incorrectly configured access control security levels within the plugin. An attacker can successfully exploit this vulnerability and gain unauthorized access, posing a serious threat to websites using the plugin from version n/a through 1.4. This issue underscores the importance of maintaining up-to-date software and implementing robust access control measures to safeguard digital assets.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress