CVE-2025-39545

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress REST API Authentication: from n/a through = 3.6.3...

WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability

Settings Change Vulnerability discovered by chuck in WordPress Plugin WordPress REST API Authentication versions = 3.6.3...

CVE-2025-39545 WordPress WordPress REST API Authentication <= 3.6.3 - Settings Change Vulnerability

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WordPress REST API Authentication: from n/a through 3.6.3...

CVE-2025-39545

CVE-2025-39545 describes a Missing Authorization vulnerability in the WordPress REST API Authentication plugin. Affected product: WordPress REST API Authentication, versions from unknown up to and including 3.6.3. Root cause: misconfigured access control enabling unauthorized actions or settings ...