CVE-2025-62932CWE-862broken-access-control

CVE-2025-62932

Medium · published October 27, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
14.1
In the wild
Unconfirmed
What it is

⚠️ A missing authorization check in Table Block by RioVizual could be your system's undoing! An attacker might easily exploit incorrectly configured access controls without breaking a sweat. 💥 Think of it like a restaurant where the waiter misreads the reservation list and lets anyone sit wherever they want, including the VIP area — suddenly, everyone has access to the exclusive dishes without any checks! This vulnerability could allow an unauthorized user to access data they shouldn't, potentially leading to data leaks or unauthorized changes. Imagine a scenario where a malicious actor swoops in and views or alters sensitive information — absolutely devastating!

Put simply

Think of it like a restaurant where the waiter misreads the reservation list and lets anyone sit wherever they want, including the VIP area — suddenly, everyone has access to the exclusive dishes without any checks! This issue arises from missing authorization checks in the Table Block, which lets users bypass security levels and access restricted data. If not addressed, any user could gain unauthorized access simply by manipulating their requests.

What to do

This vulnerability could allow an unauthorized user to access data they shouldn't, potentially leading to data leaks or unauthorized changes. Imagine a scenario where a malicious actor swoops in and views or alters sensitive information — absolutely devastating! Immediately review your configurations for Table Block by RioVizual and ensure proper authorization checks are in place. Update to the latest version to mitigate this vulnerability and audit any access controls to prevent unauthorized access. Don’t wait! You've got this! Take action to secure your system, and you'll be a security hero in no time! 🛡️

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00239 · 14.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-10-27T06:15Z
References (1)
EPSS history
Timeline
  • 27 OCT 01:34Z
    WordPress Table Block by RioVizual plugin <= 3.0.0 - Broken Access Control vulnerability
    cvelistv5