CVE-2026-25412

Published Feb 19, 2026 CVSS n/a EPSS n/a KEV · Not listed
Description
This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
References

No reference.

History
Type Values Removed Values Added
Title WordPress Advanced iFrame plugin <= 2025.10 - Broken Access Control vulnerability
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Description Missing Authorization vulnerability in mdempfle Advanced iFrame advanced-iframe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced iFrame: from n/a through <= 2025.10. This CVE ID has been rejected or withdrawn by its CVE Numbering Authority.
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N'}

Type Values Removed Values Added
First Time appeared Mdempfle
Mdempfle advanced Iframe
Wordpress
Wordpress wordpress
Vendors & Products Mdempfle
Mdempfle advanced Iframe
Wordpress
Wordpress wordpress
Type Values Removed Values Added
Description Missing Authorization vulnerability in mdempfle Advanced iFrame advanced-iframe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Advanced iFrame: from n/a through <= 2025.10.
Title WordPress Advanced iFrame plugin <= 2025.10 - Broken Access Control vulnerability
Weaknesses CWE-862
References
Weaknesses

No weakness.

Sources

Status
REJECTED
Assigner
Patchstack
Published
Updated
Feb 24, 2026, 7:01 AM
Reserved
Feb 2, 2026, 12:53 PM
Status
Rejected
Published
Feb 19, 2026, 9:16 AM
Modified
Oct 16, 2026, 2:10 PM