CVE-2025-64238

Missing Authorization vulnerability in NicolasKulka WPS Bidouille wps-bidouille allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPS Bidouille: from n/a through = 1.33.1...

CVE-2025-64238

creationtimestamp| type| source ---|---|--- 2025-12-16 09:53:08+00:00| seen| https://gist.github.com/Darkcrai86/28eb52264aa97bd11c0b579601b66af0...

CVE-2025-64238

CVE-2025-64238 is a Missing Authorization/Broken Access Control vulnerability in the NicolasKulka WPS Bidouille WordPress plugin (wps-bidouille) versions up to and including 1.33.1. The root cause is incorrectly configured access control security levels, enabling unauthorized access via the netwo...