CVE-2025-58004: WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability
Missing Authorization vulnerability in SmartDataSoft DriCub allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects DriCub: from n/a through 2.9.
Other sources
Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DriCub: from n/a through <= 2.9.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58004?
CVE-2025-58004 is classified as a Missing Authorization vulnerability that poses a significant risk due to incorrectly configured access control security levels.
How do I fix CVE-2025-58004?
To fix CVE-2025-58004, ensure that access control settings are properly configured and review user permissions within SmartDataSoft DriCub.
Which versions of DriCub are affected by CVE-2025-58004?
CVE-2025-58004 affects SmartDataSoft DriCub from n/a through version 2.9.
Does CVE-2025-58004 affect the WordPress DriCub Theme?
Yes, CVE-2025-58004 also affects the WordPress DriCub Theme up to version 2.9.
What kind of attack can exploit CVE-2025-58004?
Exploiting CVE-2025-58004 could allow unauthorized users to gain access to restricted functionalities or data due to misconfigured access controls.