CVE-2025-64282: WordPress Radius Blocks plugin <= 2.2.1 - Insecure Direct Object References (IDOR) vulnerability
Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through 2.2.1.
Other sources
Authorization Bypass Through User-Controlled Key vulnerability in RadiusTheme Radius Blocks radius-blocks allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Radius Blocks: from n/a through <= 2.2.1.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-64282?
CVE-2025-64282 is rated as a moderate severity vulnerability due to its potential for authorization bypass.
How does CVE-2025-64282 affect users?
CVE-2025-64282 allows attackers to exploit improperly configured access controls, leading to unauthorized access to restricted areas.
How do I fix CVE-2025-64282?
To fix CVE-2025-64282, update the Radius Blocks plugin to version 2.2.2 or later, which addresses the vulnerability.
What versions of Radius Blocks are impacted by CVE-2025-64282?
CVE-2025-64282 affects Radius Blocks versions from n/a up to and including 2.2.1.
Can CVE-2025-64282 be exploited without authentication?
Yes, CVE-2025-64282 can potentially be exploited by unauthenticated users if the access controls are misconfigured.