exploitDog

CVE-2025-31606

Опубликовано: 31 мар. 2025

Источник: nvd

CVSS3: 4.8

EPSS Низкий

Описание

Missing Authorization vulnerability in softpulseinfotech SP Blog Designer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SP Blog Designer: from n/a through 1.0.0.

Ссылки

https://patchstack.com/database/wordpress/plugin/sp-blog-designer/vulnerability/wordpress-sp-blog-designer-plugin-1-0-0-arbitrary-shortcode-execution-vulnerability?_s_id=cve

EPSS

Процентиль: 38%

0.00164

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-862

Связанные уязвимости

GHSA-jvh2-r8jp-5mg5

CVSS3: 4.8

github

10 месяцев назад

Missing Authorization vulnerability in softpulseinfotech SP Blog Designer allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects SP Blog Designer: from n/a through 1.0.0.

EPSS

Процентиль: 38%

0.00164

Низкий

4.8 Medium

CVSS3

Дефекты

CWE-862