CVE-2025-6786CWE-284

DocCheck Login <= 1.1.5 - Unauthorized Post Access

Medium · published July 4, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
27.3
In the wild
Unconfirmed
What it is

The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login on a password protected post after the page has loaded. This makes it possible for unauthenticated attackers to read posts they should not have access to.

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00349 · 27.3th percentile
Weakness
CWE-284 · Improper Access Control
Published
2025-07-04T01:43Z
EPSS history
Timeline
  • 04 JUL 01:43Z
    DocCheck Login <= 1.1.5 - Unauthorized Post Access
    cvelistv5