CVE-2025-48082CWE-266

CVE-2025-48082

High · published October 22, 2025

CVSS v3.1
8.8
EPSS
0%
Percentile
40.5
In the wild
Unconfirmed
What it is

⚡ An incorrect privilege assignment in Progress Planner could let a crafty user elevate their access at will! Think of it like giving someone a key to the office but forgetting to restrict access to the executive suite—suddenly, they can stroll right into the boardroom without anyone batting an eye! With this vulnerability, a nefarious actor could escalate their privileges and gain unauthorized control over sensitive data and actions within Progress Planner. This could result in unauthorized data manipulation, access to confidential information, or even a complete takeover of the system—definitely not a scenario you want to find yourself in!

Put simply

Think of it like giving someone a key to the office but forgetting to restrict access to the executive suite—suddenly, they can stroll right into the boardroom without anyone batting an eye! This privilege escalation flaw allows users to gain higher access than intended, potentially leading to unauthorized actions and data exposure within the Progress Planner application. It affects versions from n/a through 1.8.0, making it quite widespread!

What to do

With this vulnerability, a nefarious actor could escalate their privileges and gain unauthorized control over sensitive data and actions within Progress Planner. This could result in unauthorized data manipulation, access to confidential information, or even a complete takeover of the system—definitely not a scenario you want to find yourself in! To secure your system, promptly update Progress Planner to version 1.8.1 or later. Additionally, review user roles and permissions to ensure proper access controls are in place—don’t let anyone in the executive suite without the right credentials! You've got this! Follow these steps and fortify your security like a pro! 🛡️

The record
Technical detail
CVSS v3.1
8.8 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00481 · 40.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-10-22T19:15Z
References (1)
EPSS history
Timeline
  • 22 OCT 14:32Z
    WordPress Progress Planner plugin <= 1.8.0 - Privilege Escalation vulnerability
    cvelistv5