PT-2025-47768 · WordPress · Essential Plugin Featured Post Creative

CVE-2025-66106

·

Publicado

2025-11-21

·

Atualizado

2025-11-21

CVSS v3.1

4.3

Média

VetorAV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
Name of the Vulnerable Software and Affected Versions Essential Plugin Featured Post Creative versions through 1.5.5
Description The Essential Plugin Featured Post Creative component contains a flaw related to incorrectly configured access control security levels, potentially allowing unauthorized access. The issue resides in the featured-post-creative functionality.
Recommendations Update to a version beyond 1.5.5.

Correção

Missing Authorization

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-862

Identificadores relacionados

CVE-2025-66106

Produtos afetados

Essential Plugin Featured Post Creative