CVE-2025-58679: WordPress AppMySite plugin <= 3.15.0 - Broken Access Control vulnerability

Q: Which installations should be treated as affected?

AppMySite WordPress plugin installations running version 3.15.0 or earlier should be treated as affected. The supplied data does not identify a lower unaffected version boundary.

Q: Does exploitation require an account or user interaction?

No. The CVSS vector indicates network-based exploitation with no privileges required and no user interaction required.

Q: What is the stated impact if exploitation succeeds?

The CVSS assessment indicates low confidentiality impact, with no stated integrity or availability impact.

Published Sep 22, 2025

Updated

Missing Authorization vulnerability in AppMySite AppMySite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects AppMySite: from n/a through 3.14.0.

Other sources

Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AppMySite: from n/a through <= 3.15.0.

— MITRE

Affected Software

1 affected component

AppMySite AppMySite WordPress plugin<=3.15.0

Event History

Sep 22, 2025

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

DescriptionWeakness

Data Sourced

via NVD·07:16 PM

DescriptionSeverityWeakness

Frequently Asked Questions

Which installations should be treated as affected?

AppMySite WordPress plugin installations running version 3.15.0 or earlier should be treated as affected. The supplied data does not identify a lower unaffected version boundary.

Does exploitation require an account or user interaction?

No. The CVSS vector indicates network-based exploitation with no privileges required and no user interaction required.

What is the stated impact if exploitation succeeds?

The CVSS assessment indicates low confidentiality impact, with no stated integrity or availability impact.

CVE-2025-58679: WordPress AppMySite plugin <= 3.15.0 - Broken Access Control vulnerability

Other sources

Affected Software

Event History

Frequently Asked Questions

Which installations should be treated as affected?

Does exploitation require an account or user interaction?

What is the stated impact if exploitation succeeds?

Company

Resources

Contact

Frequently Asked Questions

Which installations should be treated as affected?

Does exploitation require an account or user interaction?

What is the stated impact if exploitation succeeds?