CVE-2025-53208CWE-639

WordPress Maya Business <= 1.2.0 - Insecure Direct Object References (IDOR) Vulnerability

High · published August 20, 2025

CVSS v3.1
7.5
EPSS
0%
Percentile
29.1
In the wild
Unconfirmed
What it is

Authorization Bypass Through User-Controlled Key vulnerability in paymayapg Maya Business paymaya-checkout-for-woocommerce allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Maya Business: from n/a through <= 1.2.0.

The record
Technical detail
CVSS v3.1
7.5 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00364 · 29.1th percentile
Weakness
CWE-639 · Authorization Bypass Through User-Controlled Key
Published
2025-08-20T08:03Z
EPSS history
Timeline
  • 20 AUG 08:03Z
    WordPress Maya Business <= 1.2.0 - Insecure Direct Object References (IDOR) Vulnerability
    cvelistv5