WordPress Sitewide Notice WP plugin <= 2.4.1 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Sitewide Notice WP versions = 2.4.1...

CVE-2025-67575

CVE-2025-67575 affects the WordPress plugin Sitewide Notice WP. The vulnerability is described as Missing Authorization, allowing unauthorized access to the plugin’s functionality. The initial details indicate the affected release range is Sitewide Notice WP: from n/a through &lt;= 2.4.1, with a ...

WordPress 插件跨站脚本漏洞

WordPress Plugin is an open source application plugin for WordPress. WordPress plugin Sitewide Notice before version 2.3 has a cross-site scripting vulnerability, the vulnerability stems from the plugin in its content output to the front-end page before the plugin does not validate and escape som...