CVE-2025-62938CWE-862broken-access-control

CVE-2025-62938

Medium · published October 27, 2025

CVSS v3.1
4.3
EPSS
0%
Percentile
21.2
In the wild
Unconfirmed
What it is

⚠️ An authorization gap in Reoon Email Verifier could let anyone exploit improperly set access controls. Imagine leaving the back door of your café wide open while hosting a fancy party! 🎉 Think of it like a busy restaurant where patrons can just wander into the kitchen unnoticed. If the staff don’t check who’s coming in, anyone could grab a secret recipe or even mess with the food prep! If a malicious user finds this vulnerability, they could bypass normal access restrictions and carry out unauthorized actions, such as accessing sensitive email verification details. While it might not be an immediate disaster, it can lead to serious privacy concerns and trust issues with your service.

Put simply

Think of it like a busy restaurant where patrons can just wander into the kitchen unnoticed. If the staff don’t check who’s coming in, anyone could grab a secret recipe or even mess with the food prep! This vulnerability in Reoon Email Verifier allows attackers to exploit incorrectly configured access control levels, enabling them to access areas of the application they shouldn’t be able to, potentially exposing sensitive information.

What to do

If a malicious user finds this vulnerability, they could bypass normal access restrictions and carry out unauthorized actions, such as accessing sensitive email verification details. While it might not be an immediate disaster, it can lead to serious privacy concerns and trust issues with your service. To safeguard against this, ensure you update to version 2.0.2 or later, review your configuration settings, and implement strict access controls. Regular audits can help catch any future lapses and reinforce security. You've got this! With these steps, you’ll tighten up security and protect your users from potential threats. 🛡️

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
CVSS v4.0
Not supplied
EPSS
0.00297 · 21.2th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-10-27T06:15Z
References (1)
EPSS history
Timeline
  • 27 OCT 01:34Z
    WordPress Reoon Email Verifier plugin <= 2.0.1 - Broken Access Control vulnerability
    cvelistv5