CVE-2025-23477: WordPress Realty Workstation plugin <= 1.0.45 - Broken Access Control vulnerability
Missing Authorization vulnerability in realtyworkstation Realty Workstation realty-workstation allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Realty Workstation: from n/a through <= 1.0.45.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-23477?
The severity of CVE-2025-23477 is classified as medium due to the presence of a missing authorization vulnerability.
How do I fix CVE-2025-23477?
To fix CVE-2025-23477, update the Realty Workstation or WordPress Realty Workstation plugin to the latest version beyond 1.0.45.
What types of systems are affected by CVE-2025-23477?
CVE-2025-23477 affects Realty Workstation versions from n/a to 1.0.45 and the WordPress Realty Workstation plugin up to version 1.0.45.
What is the potential impact of CVE-2025-23477?
The potential impact of CVE-2025-23477 includes unauthorized access to functionalities that are not properly constrained by access control lists (ACLs).
Is there a workaround for CVE-2025-23477?
A temporary workaround for CVE-2025-23477 is to restrict access to the impacted functionalities until the software can be updated.