CVE-2025-54741CWE-862

WordPress Super Blank Plugin <= 1.2.0 - Arbitrary Content Deletion Vulnerability

Medium · published December 18, 2025

CVSS v3.1
6.5
EPSS
0%
Percentile
23.9
In the wild
Unconfirmed
What it is

⚠️ A tiny oversight in access control could give unauthorized users the keys to your data! Think of it like a restaurant that accidentally left a side door unlocked; anyone can waltz in without checking reservations. This missing authorization in Tyler Moore Super Blank means that if security levels are misconfigured, the wrong guests can access sensitive areas. This means an attacker could potentially gain access to restricted resources, leading to data leaks or manipulation that could undermine system integrity. While it isn’t a catastrophe, allowing unauthorized access is still a risky misstep and could lead to serious long-term consequences.

Put simply

Think of it like a restaurant that accidentally left a side door unlocked; anyone can waltz in without checking reservations. This missing authorization in Tyler Moore Super Blank means that if security levels are misconfigured, the wrong guests can access sensitive areas. The vulnerability is due to missing authorization checks in Tyler Moore Super Blank, allowing users to exploit incorrectly configured access control security levels, leading to potential unauthorized access to features or data.

What to do

This means an attacker could potentially gain access to restricted resources, leading to data leaks or manipulation that could undermine system integrity. While it isn’t a catastrophe, allowing unauthorized access is still a risky misstep and could lead to serious long-term consequences. To secure your system, first, review and tighten your access control configurations, ensuring proper authorization checks are enforced. Upgrade to the latest version of Super Blank to mitigate these risks, and conduct a security audit to identify any lingering issues. You've got this! Just implement these steps, and you’ll be back on track in no time. 🛡️

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.00321 · 23.9th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-12-18T07:21Z
EPSS history
Timeline
  • 18 DEC 07:21Z
    WordPress Super Blank Plugin <= 1.2.0 - Arbitrary Content Deletion Vulnerability
    cvelistv5