CVE-2025-54711

Name of the Vulnerable Software and Affected Versions Info Cards versions prior to 1.0.12

Description The Info Cards plugin for WordPress contains a missing authorization flaw that allows authenticated users with Subscriber-level access and above to perform unauthorized actions. This occurs because a function lacks a proper capability check, resulting in functionality that is not properly constrained by Access Control Lists (ACLs), which are sets of rules that define which users or system processes are granted access to objects.

Recommendations Update the plugin to a version later than 1.0.11.