CVE-2025-39545
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Apr 16, 2025
CWE ID 862
Summary
CVE-2025-39545 is a Missing Authorization vulnerability affecting the miniOrange WordPress REST API Authentication plugin. It allows unauthorized access to protected data or functionality due to incorrectly configured access control security levels. This issue can be exploited if an attacker gains access to the plugin's REST API and can potentially impact WordPress versions from n/a to 3.6.3. It is crucial for users to update their plugins to the latest version and properly configure their access control settings to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.