CVE-2025-68586CWE-862broken-access-control

CVE-2025-68586

Medium · published December 24, 2025

CVSS v3.1
5.3
EPSS
0%
Percentile
16.1
In the wild
Unconfirmed
What it is

⚠️ A misstep in access control could let anyone through the door! With missing authorization in Gora Tech Cooked, your security levels aren’t as locked down as you thought. 🔓 Think of it like a restaurant that lets anyone walk into the kitchen without checking if they have the right credentials — a recipe for disaster! Here, an attacker could stroll past the security measures and access sensitive areas of your system, just like a chef who forgot to lock up after a busy service. If exploited, this vulnerability could allow unauthorized users to access restricted areas of the application, leading to data leaks or unauthorized changes. While it might not be a headline-grabber today, leaving it unchecked can lead to surprises you definitely don’t want in your kitchen.

Put simply

Think of it like a restaurant that lets anyone walk into the kitchen without checking if they have the right credentials — a recipe for disaster! Here, an attacker could stroll past the security measures and access sensitive areas of your system, just like a chef who forgot to lock up after a busy service. This missing authorization vulnerability allows users to bypass access control mechanisms due to incorrect configurations in Gora Tech Cooked versions up to 1.11.3. It's like having a door that doesn't actually latch, making it easy for unauthorized individuals to stroll right in.

What to do

If exploited, this vulnerability could allow unauthorized users to access restricted areas of the application, leading to data leaks or unauthorized changes. While it might not be a headline-grabber today, leaving it unchecked can lead to surprises you definitely don’t want in your kitchen. To fix this, update Gora Tech Cooked to the latest version above 1.11.3 and review your access control configurations to ensure they're set correctly. Regularly audit permissions to keep your system secure! You've got this! Follow these steps, and you'll have your security tightened up in no time. 🛡️

The record
Technical detail
CVSS v3.1
5.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00254 · 16.1th percentile
Weakness
CWE-862 · Missing Authorization
Published
2025-12-24T18:16Z
References (1)
EPSS history
Timeline
  • 24 DEC 13:10Z
    WordPress Cooked plugin <= 1.11.3 - Broken Access Control vulnerability
    cvelistv5