CVE-2025-54025: WordPress Coupon Affiliates Plugin <= 6.4.0 - Settings Change Vulnerability
Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Coupon Affiliates: from n/a through 6.4.0.
Other sources
Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.4.0.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-54025?
CVE-2025-54025 is classified as a Missing Authorization vulnerability that can lead to unauthorized access due to incorrectly configured access control security levels.
What versions are affected by CVE-2025-54025?
CVE-2025-54025 affects RelyWP Coupon Affiliates and WordPress Coupon Affiliates Plugin versions up to 6.4.0.
How do I fix CVE-2025-54025?
To mitigate CVE-2025-54025, ensure that proper access control measures are implemented and review the configuration settings for the affected plugins.
What can happen if CVE-2025-54025 is exploited?
Exploitation of CVE-2025-54025 can allow malicious users to gain unauthorized access and manipulate the functionalities of the Coupon Affiliates plugin.
Are there any reports or advisories related to CVE-2025-54025?
Yes, advisories regarding CVE-2025-54025 can be found in security databases and are important for understanding the implications and necessary actions.