CVE-2025-32226

{"id": "CVE-2025-32226", "cveTags": [], "metrics": {"cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "published": "2025-04-04T16:15:31.863", "references": [{"url": "https://patchstack.com/database/wordpress/plugin/display-product-variations-dropdown-on-shop-page/vulnerability/wordpress-display-product-variations-dropdown-on-shop-page-plugin-1-1-3-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Awaiting Analysis", "weaknesses": [{"type": "Primary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Display product variations dropdown on shop page: from n/a through 1.1.3."}, {"lang": "es", "value": "La vulnerabilidad de falta de autorizaci\u00f3n en Anzar Ahmed Display product variations dropdown on shop page permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al men\u00fa desplegable de variaciones de producto de Anzar Ahmed en la p\u00e1gina de la tienda: desde n/d hasta la versi\u00f3n 1.1.3."}], "lastModified": "2025-04-07T14:18:15.560", "sourceIdentifier": "audit@patchstack.com"}