CVE-2025-60123: WordPress HivePress Claim Listings plugin <= 1.1.3 - Broken Access Control vulnerability
Missing Authorization vulnerability in HivePress HivePress Claim Listings allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects HivePress Claim Listings: from n/a through 1.1.3.
Other sources
Missing Authorization vulnerability in HivePress HivePress Claim Listings hivepress-claim-listings allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects HivePress Claim Listings: from n/a through <= 1.1.3.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-60123?
CVE-2025-60123 is categorized as a medium severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2025-60123?
To mitigate CVE-2025-60123, ensure proper configuration of access control security levels in HivePress Claim Listings.
What versions are affected by CVE-2025-60123?
CVE-2025-60123 affects HivePress Claim Listings versions up to and including 1.1.3.
What types of exploits are possible with CVE-2025-60123?
CVE-2025-60123 can be exploited to gain unauthorized access to sensitive data or functionality due to incorrectly configured access controls.
Who is susceptible to CVE-2025-60123?
Users of HivePress Claim Listings on WordPress who have not updated to the latest version are susceptible to CVE-2025-60123.