CVE-2025-67583CWE-862broken-access-control

CVE-2025-67583

Medium · published December 9, 2025

CVSS v3.1

5.3

EPSS

Percentile

10.5

In the wild

Unconfirmed

What it is

Missing Authorization vulnerability in Foysal Imran IDonate idonate allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects IDonate: from n/a through <= 2.1.15.

The record

Technical detail

CVSS v3.1: 5.3 · MEDIUM
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0: Not supplied
EPSS: 0.00209 · 10.5th percentile
Weakness: CWE-862 · Missing Authorization
Published: 2025-12-09T21:18Z

Affected products (1)

Product	Versions	Fixed in
themeatelier/idonate	< 2.1.16	2.1.16

References (1)

https://patchstack.com/database/Wordpress/Plugin/idonate/vulnerability/wordpress-idonate-plugin-2-1-15-broken-access-control-vulnerability?_s_id=cve · [email protected]

EPSS history

Timeline

09 DEC 14:14Z
WordPress IDonate plugin <= 2.1.15 - Broken Access Control vulnerability
cvelistv5