CVE-2025-52726CWE-266

WordPress CouponXxL Custom Post Types plugin <= 3.0 - Privilege Escalation Vulnerability

High · published June 27, 2025

CVSS v3.1
8.6
EPSS
0%
Percentile
20.4
In the wild
Unconfirmed
What it is

Incorrect Privilege Assignment vulnerability in pebas CouponXxL Custom Post Types couponxxl-cpt allows Privilege Escalation.This issue affects CouponXxL Custom Post Types: from n/a through <= 3.0.

The record
Technical detail
CVSS v3.1
8.6 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00289 · 20.4th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2025-06-27T11:52Z
EPSS history
Timeline
  • 27 JUN 11:52Z
    WordPress CouponXxL Custom Post Types plugin <= 3.0 - Privilege Escalation Vulnerability
    cvelistv5