CVE-2025-49989

CVE-2025-49989 refers to a Missing Authorization (Broken Access Control) vulnerability in the WordPress App Builder plugin, affecting versions up to 5.5.3. The issue arises from improperly configured access control/security levels, enabling an attacker to bypass authorization. Public sources corr...