CVE-2025-30960: WordPress FS Poster plugin <= 6.5.8 - Subscriber+ Site Wide Broken Access Control vulnerability
Missing Authorization vulnerability in fs-code FS Poster fs-poster.This issue affects FS Poster: from n/a through <= 6.5.8.
Other sources
Missing Authorization vulnerability in NotFound FS Poster. This issue affects FS Poster: from n/a through 6.5.8.
— NVD
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-30960?
CVE-2025-30960 is classified as a high severity vulnerability due to missing authorization in FS Poster.
How do I fix CVE-2025-30960?
To fix CVE-2025-30960, update FS Poster to a version later than 6.5.8, which addresses the missing authorization issue.
What versions are affected by CVE-2025-30960?
CVE-2025-30960 affects all versions of FS Poster up to and including 6.5.8.
What type of vulnerability is CVE-2025-30960?
CVE-2025-30960 is a missing authorization vulnerability that allows unauthorized access to features within FS Poster.
Where can I find more information about CVE-2025-30960?
Information about CVE-2025-30960 can be found through the official FS Poster and WordPress documentation regarding security updates.