Vulnerability Bulletins

CVE-2025-39545

   
Affected software WORDPRESS
 
Missing Authorization vulnerability in miniOrange WordPress REST API Authentication allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress REST API Authentication: from n/a through 3.6.3.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-39545