CVE-2025-29001CWE-862

WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability

Medium · published July 4, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
11.7
In the wild
Unconfirmed
What it is

Missing Authorization vulnerability in ZoomIt WooCommerce Shop Page Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WooCommerce Shop Page Builder: from n/a through 2.27.7.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00219 · 11.7th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-07-04T08:42Z
EPSS history
Timeline
  • 04 JUL 08:42Z
    WordPress WooCommerce Shop Page Builder plugin <= 2.27.7 - Broken Access Control Vulnerability
    cvelistv5