CVE-2025-23917CWE-862

WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability

Medium · published January 16, 2025

CVSS v3.1
5.4
EPSS
0%
Percentile
40.2
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in Chandrika Guntur, Morgan Kay Chamber Dashboard Business Directory allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Chamber Dashboard Business Directory: from n/a through 3.3.8.

The record
Technical detail
CVSS v3.1
5.4 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00477 · 40.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-01-16T20:07Z
EPSS history
Timeline
  • 16 JAN 20:07Z
    WordPress Chamber Dashboard Business Directory Plugin <= 3.3.8 - Broken Access Control vulnerability
    cvelistv5