CVE-2025-5060

creationtimestamp| type| source ---|---|--- 2025-08-23 08:28:45+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lx2ki6y7dx2q 2026-04-08 23:31:42+00:00| seen| Telegram/9bO0-1binurVzp3pCY9TyWaRl8X3rBZNbLTO3pIar2J4QNM...

CVE-2025-5060

The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebookajaxlogincallback. This makes it possible for...