CVE-2025-39434
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 17, 2025
CWE ID 639
Summary
CVE-2025-39434 is a newly disclosed vulnerability affecting the Scott Taylor Avatar software. The issue involves an authorization bypass through a user-controlled key, which can be exploited when access control security levels are incorrectly configured. This flaw allows unauthorized access to sensitive data or functions, posing a significant security risk. Affected versions of Avatar range from n/a to 0.1.4, and users are strongly advised to apply the necessary patches to mitigate this vulnerability.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Avatar Plugin
Affected Vendors
- WordPress