exploitDog

CVE-2025-68502

Опубликовано: 29 дек. 2025

Источник: nvd

EPSS Низкий

Описание

Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup jet-popup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through <= 2.0.20.1.

Ссылки

https://patchstack.com/database/Wordpress/Plugin/jet-popup/vulnerability/wordpress-jetpopup-plugin-2-0-20-1-insecure-direct-object-references-idor-vulnerability?_s_id=cve

EPSS

Процентиль: 7%

0.00025

Низкий

Дефекты

CWE-639

Связанные уязвимости

GHSA-29xr-58g9-8qfq

CVSS3: 4.3

github

3 месяца назад

Authorization Bypass Through User-Controlled Key vulnerability in Crocoblock JetPopup allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects JetPopup: from n/a through 2.0.20.1.

EPSS

Процентиль: 7%

0.00025

Низкий

Дефекты

CWE-639