4.3
/ 10
MEDIUM
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Description
Missing Authorization vulnerability in Stiofan UsersWP userswp allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects UsersWP: from n/a through <= 1.2.47.
Basic Information
ID
CVE-2025-66072
Source
Patchstack
Published
Nov 21, 2025 at 12:29
Modified
Nov 21, 2025 at 21:50
Affected Product
Vendor
Stiofan
Product
UsersWP
Version
n/a
Affected Versions
Stiofan UsersWP n/a