CVE-2025-62755: WordPress GS Portfolio for Envato plugin <= 1.4.2 - Broken Access Control vulnerability
Missing Authorization vulnerability in GS Plugins GS Portfolio for Envato gs-envato-portfolio allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GS Portfolio for Envato: from n/a through <= 1.4.2.
Other sources
Unauthenticated Broken Access Control in GS Portfolio for Envato <= 1.4.2 versions.
— NVD
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-62755?
CVE-2025-62755 is classified as a critical vulnerability due to its potential impact on unauthorized access.
How do I fix CVE-2025-62755?
To fix CVE-2025-62755, you should update the GS Portfolio for Envato plugin to version 1.4.3 or later.
What are the potential risks associated with CVE-2025-62755?
The potential risks include unauthorized access to sensitive data and exploitation of the system by attackers.
What versions are affected by CVE-2025-62755?
CVE-2025-62755 affects all versions of GS Portfolio for Envato up to and including version 1.4.2.
Is CVE-2025-62755 exploitable by unauthenticated users?
Yes, CVE-2025-62755 can be exploited by unauthenticated users, allowing them to bypass access controls.