PT-2025-54382

🗓️ 31 Dec 2025 00:00:00Reported by Positive TechnologiesType

Missing authorization in Extend Themes Vireo allows misconfigured access control; affected up to 1.0.24.

Reporter	Title	Published	Views	Family All 13
Circl	CVE-2025-62751	31 Dec 202516:57	–	circl
CNNVD	WordPress plugin Vireo 安全漏洞	31 Dec 202500:00	–	cnnvd
CVE	CVE-2025-62751	31 Dec 202516:02	–	cve
Cvelist	CVE-2025-62751 WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability	31 Dec 202516:02	–	cvelist
EUVD	EUVD-2025-206026	31 Dec 202516:02	–	euvd
NVD	CVE-2025-62751	31 Dec 202516:15	–	nvd
OSV	CVE-2025-62751	31 Dec 202516:15	–	osv
Patchstack	WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability	31 Dec 202515:56	–	patchstack
Patchstack	WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability	31 Dec 202515:56	–	patchstack
Rapid7 Vulnerability Database (full)	CVE-2025-62751: Missing Authorization	31 Dec 202500:00	–	rapid7

Source	Link
vdp	www.vdp.patchstack.com/database/wordpress/theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability
osv	www.osv.dev/vulnerability/CVE-2025-62751
t	www.t.me/cveNotify/320164
twitter	www.twitter.com/CVEnew/status/2006495443396477017
patchstack	www.patchstack.com/database/wordpress/theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
nvd	www.nvd.nist.gov/vuln/detail/CVE-2025-62751
wordfence	www.wordfence.com/threat-intel/vulnerabilities/id/d7c03f9e-fd4e-4787-ae7c-8aff8c854730
t	www.t.me/cveNotify/148419
patchstack	www.patchstack.com/database/Wordpress/Theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability

23 Sep 2026 00:00Current

6.5Medium risk

Vulners AI Score6.5

CVSS 3.14.3 - 8.8

EPSS0.00211

SSVC