{"id":"CVE-2025-22647","aliases":["EUVD-2025-8479","GHSA-6xh6-m46q-mr84"],"status":"published","title":"WordPress  AIO Performance Profiler plugin \u003c= 1.2 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug all-in-one-performance-accelerator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug: from n/a through \u003c= 1.2.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00289,"percentile":0.21617,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-03-27T15:07:25Z","modified":"2026-06-17T08:48:57Z","products":[{"vendor":"smackcoders","product":"aio performance profiler, monitor, optimize, compress \u0026 debug"},{"vendor":"smackcoders inc.,","product":"aio performance profiler, monitor, optimize, compress \u0026 debug"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/all-in-one-performance-accelerator/vulnerability/wordpress-aio-performance-profiler-plugin-1-2-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-22647"},{"url":"https://patchstack.com/database/wordpress/plugin/all-in-one-performance-accelerator/vulnerability/wordpress-aio-performance-profiler-plugin-1-2-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-6xh6-m46q-mr84"}],"sources":{"cve":[{"id":"CVE-2025-22647","title":"WordPress  AIO Performance Profiler plugin \u003c= 1.2 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug all-in-one-performance-accelerator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug: from n/a through \u003c= 1.2.","status":"published","published":"2025-03-27T15:07:25.357Z","modified":"2026-04-28T16:11:03.456Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:29.286772Z"}],"euvd":[{"id":"EUVD-2025-8479","description":"Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug all-in-one-performance-accelerator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug: from n/a through \u003c= 1.2.","status":"published","published":"2025-03-27T15:07:25Z","modified":"2026-04-28T16:11:03Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:05:53.863161Z"}],"ghsa":[{"id":"GHSA-6xh6-m46q-mr84","title":"Missing Authorization vulnerability in smackcoders AIO Performance Profiler, Monitor, Optimize,...","description":"Missing Authorization vulnerability in smackcoders AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug: from n/a through 1.2.","status":"published","published":"2025-03-27T15:31:12Z","modified":"2025-03-27T15:31:21Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:00:29.248113Z"}],"nvd":[{"id":"CVE-2025-22647","description":"Missing Authorization vulnerability in Smackcoders Inc., AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug all-in-one-performance-accelerator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AIO Performance Profiler, Monitor, Optimize, Compress \u0026 Debug: from n/a through \u003c= 1.2.","status":"published","published":"2025-03-27T15:15:57.543Z","modified":"2026-06-17T08:48:57.747Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:56.494516Z"}]}}