CVE-2025-49320: WordPress FraudLabs Pro for WooCommerce plugin <= 2.22.11 - Broken Access Control Vulnerability
Missing Authorization vulnerability in fraudlabspro FraudLabs Pro for WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects FraudLabs Pro for WooCommerce: from n/a through 2.22.11.
Other sources
Missing Authorization vulnerability in fraudlabspro FraudLabs Pro for WooCommerce fraudlabs-pro-for-woocommerce allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FraudLabs Pro for WooCommerce: from n/a through <= 2.22.11.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-49320?
CVE-2025-49320 has a high severity rating due to its potential for unauthorized access through misconfigured access controls.
How do I fix CVE-2025-49320?
To fix CVE-2025-49320, ensure that you update FraudLabs Pro for WooCommerce to the latest version above 2.22.11 and configure your access controls properly.
Who is affected by CVE-2025-49320?
CVE-2025-49320 affects users of FraudLabs Pro for WooCommerce version 2.22.11 and earlier.
What type of vulnerability is CVE-2025-49320?
CVE-2025-49320 is categorized as a Missing Authorization vulnerability.
Is CVE-2025-49320 a common vulnerability?
CVE-2025-49320 is a significant concern due to its common occurrence in improperly configured access controls.