CVE-2025-6003: falha de média gravidade em cyberlord92 WordPress Single Sign-On (SSO)…
WordPress Single Sign-On (SSO) - Multiple Versions - Incorrect Authorization to Sensitive Information Exposure
Publicada em · Atualizada em
Seguir esta CVE+ Monitorar WordPress Single Sign-On - Multisite All-Inclusive+ Monitorar WordPress Single Sign-On - Multisite Enterprise
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
13Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackcvss 5.3epss 0.3%
The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Produtos afetados
cyberlord92 · WordPress Single Sign-On (SSO) - Multisite All-Inclusivecyberlord92 · WordPress Single Sign-On (SSO) - Multisite Enterprisecyberlord92 · WordPress Single Sign-On (SSO) - Multisite Premiumcyberlord92 · WordPress Single Sign-On (SSO) - Single Site All-Inclusivecyberlord92 · WordPress Single Sign-On (SSO) - Single Site Enterprisecyberlord92 · WordPress Single Sign-On (SSO) - Single Site Premiumcyberlord92 · WordPress Single Sign-On (SSO) - Single Site Standard