Boletines de Vulnerabilidades

CVE-2025-49974

   
Software afectado WORDPRESS
 
Missing Authorization vulnerability in upstreamplugin UpStream: a Project Management Plugin for WordPress allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects UpStream: a Project Management Plugin for WordPress: from n/a through 2.1.0.

Link:

https://nvd.nist.gov/vuln/detail/CVE-2025-49974