CVE-2025-39571
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Apr 16, 2025
CWE ID 862
Summary
CVE-2025-39571 is a critical security vulnerability affecting the WPXPO WowStore plugin. This issue involves a missing authorization control, allowing unauthorized access to certain functionalities. The flaw arises due to incorrectly configured access control security levels. This vulnerability can be exploited by attackers, and it affects all versions of WowStore from n/a through 4.2.4. Immediate action is required for users to patch their systems and secure their stores against potential attacks.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.