CVE-2025-67974

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-67974", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "state": "PUBLISHED", "assignerShortName": "Patchstack", "dateReserved": "2025-12-15T10:00:28.856Z", "datePublished": "2026-02-20T15:46:29.701Z", "dateUpdated": "2026-04-28T16:14:24.981Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wplegalpages", "product": "WPLegalPages", "vendor": "WP Legal Pages", "versions": [{"changes": [{"at": "3.5.5", "status": "unaffected"}], "lessThanOrEqual": "3.5.4", "status": "affected", "version": "0", "versionType": "custom"}]}], "credits": [{"lang": "en", "type": "finder", "value": "NumeX | Patchstack Bug Bounty Program"}], "datePublic": "2026-04-22T14:20:26.807Z", "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.<p>This issue affects WPLegalPages: from n/a through <= 3.5.4.</p>"}], "value": "Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through <= 3.5.4."}], "impacts": [{"capecId": "CAPEC-180", "descriptions": [{"lang": "en", "value": "Exploiting Incorrectly Configured Access Control Security Levels"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-862", "description": "Missing Authorization", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-28T16:14:24.981Z"}, "references": [{"tags": ["vdb-entry"], "url": "https://patchstack.com/database/Wordpress/Plugin/wplegalpages/vulnerability/wordpress-wplegalpages-plugin-3-5-4-broken-access-control-vulnerability?_s_id=cve"}], "title": "WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability"}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-02-24T21:53:11.963648Z", "id": "CVE-2025-67974", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-27T18:09:16.688Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-67974", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-02-24T21:53:11.963648Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-02-24T21:53:29.072Z"}}], "cna": {"title": "WordPress WPLegalPages plugin <= 3.5.4 - Broken Access Control vulnerability", "credits": [{"lang": "en", "type": "finder", "value": "NumeX | Patchstack Bug Bounty Program"}], "impacts": [{"capecId": "CAPEC-180", "descriptions": [{"lang": "en", "value": "Exploiting Incorrectly Configured Access Control Security Levels"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 7.5, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "WP Legal Pages", "product": "WPLegalPages", "versions": [{"status": "affected", "changes": [{"at": "3.5.5", "status": "unaffected"}], "version": "0", "versionType": "custom", "lessThanOrEqual": "3.5.4"}], "packageName": "wplegalpages", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}], "datePublic": "2026-04-22T14:20:26.807Z", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/wplegalpages/vulnerability/wordpress-wplegalpages-plugin-3-5-4-broken-access-control-vulnerability?_s_id=cve", "tags": ["vdb-entry"]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through <= 3.5.4.", "supportingMedia": [{"type": "text/html", "value": "Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.<p>This issue affects WPLegalPages: from n/a through <= 3.5.4.</p>", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "Missing Authorization"}]}], "providerMetadata": {"orgId": "21595511-bba5-4825-b968-b78d1f9984a3", "shortName": "Patchstack", "dateUpdated": "2026-04-23T14:13:55.353Z"}}}, "cveMetadata": {"cveId": "CVE-2025-67974", "state": "PUBLISHED", "dateUpdated": "2026-04-27T18:09:16.688Z", "dateReserved": "2025-12-15T10:00:28.856Z", "assignerOrgId": "21595511-bba5-4825-b968-b78d1f9984a3", "datePublished": "2026-02-20T15:46:29.701Z", "assignerShortName": "Patchstack"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected", "packageName": "wplegalpages", "product": "WPLegalPages", "vendor": "WP Legal Pages", "versions": [{"changes": [{"at": "3.5.5", "status": "unaffected"}], "lessThanOrEqual": "3.5.4", "status": "affected", "version": "0", "versionType": "custom"}]}], "source": "audit@patchstack.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in WP Legal Pages WPLegalPages wplegalpages allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPLegalPages: from n/a through <= 3.5.4."}, {"lang": "es", "value": "Vulnerabilidad de autorizaci\u00f3n faltante en WP Legal Pages WPLegalPages wplegalpages permite la explotaci\u00f3n de niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta a WPLegalPages: desde n/a hasta &lt;= 3.5.4."}], "id": "CVE-2025-67974", "lastModified": "2026-06-17T09:58:21.527", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "audit@patchstack.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-67974", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-02-24T21:53:11.963648Z", "version": "2.0.3"}}]}, "published": "2026-02-20T16:22:03.680", "references": [{"source": "audit@patchstack.com", "url": "https://patchstack.com/database/Wordpress/Plugin/wplegalpages/vulnerability/wordpress-wplegalpages-plugin-3-5-4-broken-access-control-vulnerability?_s_id=cve"}], "sourceIdentifier": "audit@patchstack.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "audit@patchstack.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "unaffected", "versions": null}], "enrichment": {"confidence": 80.0, "confidence_source": "inferred", "scores": [{"score": 80.0, "source": "inferred"}, {"score": 100.0, "source": "matching"}]}, "product": "wordpress", "vendor": "wordpress"}, {"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.5.4]"}}, {"platform": null, "status": "unaffected", "versions": {"scheme": "semver", "value": "[3.5.5,*]"}}], "enrichment": {"confidence": 93.0, "confidence_source": "matching", "scores": [{"score": 93.0, "source": "matching"}]}, "original": {"product": "WPLegalPages", "source": "cna", "vendor": "WP Legal Pages"}, "product": "wp_legal_pages", "vendor": "wplegalpages"}], "analysis": {"en": {"generated_at": "2026-04-27T20:58:48.030753+00:00", "value": {"mitigation_remediation": ["Update the WP Legal Pages plugin to version 3.5.5 or newer, which contains the fix for the access control issue.", "Verify that restricted pages are set to be visible only to administrators and that no non\u2011admin roles have been granted access.", "Monitor the site\u2019s access logs for any unauthorized requests to plugin URLs and investigate suspicious activity promptly."], "summary": {"action": "Patch Immediately", "impact": "Unauthorized Access"}, "threat_synthesis": {"affected_systems": "WP Legal Pages (WPLegalPages) plugin versions up to and including 3.5.4 are affected. Any WordPress installation that has the WPLegalPages plugin enabled and not updated to a newer version is at risk. ", "description_and_impact": "The vulnerability is a missing authorization flaw that allows an attacker to bypass the intended access control on WP Legal Pages. Because the plugin fails to enforce proper permissions, an attacker can read or modify legal page content, potentially exposing sensitive information or spoofing compliance documents. The weakness is identified as CWE\u2011862, an insufficiency in access control. The crafted exploit could let a malicious user obtain or alter data that should be confined to privileged administrators. ", "risk_and_exploitability": "The CVSS base score of 7.5 signifies a high severity vulnerability. An EPSS score of less than 1% indicates a very low probability of active exploitation at the time of analysis, and the issue is not yet listed in CISA\u2019s KEV catalog. Attackers could reach the vulnerable plugin via the web interface; they would need to exploit the broken access control on plugin pages, which might require authenticated credentials depending on how the site is configured. The likelihood of exploitation remains low, but the potential impact is significant if the flaw is leveraged to modify legal content or gain further access. "}}}}, "created": "2026-02-23T14:46:23.062502+00:00", "updated": "2026-04-27T21:00:13.177872+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress", "wplegalpages", "wplegalpages$PRODUCT$wp_legal_pages"]}