CVE-2025-28874: WordPress BP Email Assign Templates By shanebp plugin <= 1.7 - Arbitrary Content Deletion vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in shanebp BP Email Assign Templates bp-email-assign-templates allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BP Email Assign Templates: from n/a through <= 1.7.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-28874?
CVE-2025-28874 is classified as a critical severity vulnerability due to its potential for unauthorized access and exploitation.
How do I fix CVE-2025-28874?
To fix CVE-2025-28874, upgrade BP Email Assign Templates to version 1.7 or later to ensure correct access control configurations.
What systems are affected by CVE-2025-28874?
CVE-2025-28874 affects the BP Email Assign Templates plugin for WordPress from version n/a up to 1.6.
What type of vulnerability is CVE-2025-28874?
CVE-2025-28874 is an authorization bypass vulnerability that allows unauthorized exploitation due to incorrectly configured access controls.
Is there a known exploit for CVE-2025-28874?
Yes, CVE-2025-28874 is known to be exploitable due to the improper access control settings in the affected plugin version.