CVE-2025-29010mediumCWE-862

CVE-2025-29010: falha de média gravidade em eleopard Behance Portfolio Manager

WordPress Behance Portfolio Manager plugin <= 1.7.5 - Broken Access Control vulnerability

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Behance Portfolio Manager

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 4.3epss 0.3%
Missing Authorization vulnerability in eleopard Behance Portfolio Manager portfolio-manager-powered-by-behance allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Behance Portfolio Manager: from n/a through <= 1.7.5.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Produtos afetados
eleopard · Behance Portfolio Manager
CVEs relacionadas — eleopard Behance Portfolio Manager

No mesmo produto, das mais perigosas para as menos.

CVE-2025-32124HIGHWordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerabilityEPSS 0.6%CVE-2025-31526HIGHWordPress Behance Portfolio Manager plugin <= 1.7.5 - SQL Injection vulnerabilityEPSS 0.3%CVE-2025-57913MEDIUMWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-59135MEDIUMWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2025-59137HIGHWordPress Behance Portfolio Manager plugin <= 1.7.5 - Cross Site Request Forgery (CSRF) vulnerabilityEPSS 0.1%