CVE-2025-39591
CVSS 3.1 Score 5.4 of 10 (medium)
Details
Published Apr 16, 2025
CWE ID 862
Summary
CVE-2025-39591 is a security vulnerability affecting WP Subscription Forms versions 1.2.3 and below. This issue involves missing authorization, allowing unauthorized access and potential exploitation. The vulnerability stems from incorrectly configured access control security levels within the plugin. Malicious actors can leverage this weakness to gain unwarranted privileges and manipulate the WP Subscription Forms functionality. System administrators are advised to update their installations to the latest version to mitigate this risk.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress