WordPress WowAddons plugin <= 1.5.11 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nabil Irawan in WordPress Plugin WowAddons versions = 1.5.11...

CVE-2025-57958

...

CVE-2025-57958

...

CVE-2025-57958

CVE-2025-57958 is described as a Missing Authorization issue in WPXPO WowAddons affecting WowAddons up to version 1.0.17. The Initial Description lists the patch status as Unpatched. No Connected documents with technical details are provided.

编号撤回

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a blogging platform developed using the PHP language. The platform has the ability to host personal blog sites on PHP and MySQL based servers.WordPress plugin is an application plugin... A security...

PT-2025-38808

Name of the Vulnerable Software and Affected Versions WowAddons versions through 1.0.17 Description An authorization issue exists in WPXPO WowAddons, allowing exploitation due to incorrectly configured access control security levels. Recommendations Update WowAddons to a version later than 1.0.17...