CVE-2025-59551: WordPress Revive.so Plugin <= 2.0.6 - Broken Access Control Vulnerability
Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.6.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59551?
CVE-2025-59551 is classified as a missing authorization vulnerability with critical potential impacts on system access control.
How do I fix CVE-2025-59551?
To fix CVE-2025-59551, update the WP Chill Revive.so plugin to the latest version beyond 2.0.6 to ensure proper access control is configured.
Who is affected by CVE-2025-59551?
CVE-2025-59551 affects users of WP Chill Revive.so and WordPress Revive.so Plugin versions up to and including 2.0.6.
What types of attacks might exploit CVE-2025-59551?
CVE-2025-59551 may be exploited by attackers to bypass access controls, potentially leading to unauthorized data access or modifications.
Is there a workaround for CVE-2025-59551?
Currently, the best course of action for CVE-2025-59551 is to update the plugin, as no reliable workaround exists to fully mitigate the vulnerability.