CVE-2025-59567: WordPress Coupon Affiliates Plugin <= 6.8.0 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Elliot Sowersby / RelyWP Coupon Affiliates woo-coupon-usage allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Coupon Affiliates: from n/a through <= 6.8.0.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-59567?
CVE-2025-59567 is classified as a high severity vulnerability due to missing authorization in the Coupon Affiliates plugin.
How do I fix CVE-2025-59567?
To mitigate CVE-2025-59567, update the RelyWP Coupon Affiliates plugin to the latest version above 6.8.0.
Who is affected by CVE-2025-59567?
CVE-2025-59567 affects users of RelyWP Coupon Affiliates and WordPress Coupon Affiliates Plugin versions up to 6.8.0.
What type of vulnerability is CVE-2025-59567?
CVE-2025-59567 is a Missing Authorization vulnerability caused by incorrectly configured access control security levels.
Is there a known exploit for CVE-2025-59567?
Yes, CVE-2025-59567 can be exploited to gain unauthorized access due to improper access controls in the affected plugins.