{"id":"CVE-2025-31854","aliases":["EUVD-2025-9175","GHSA-8cq7-m6j9-qw55"],"status":"published","title":"WordPress Simple Sticky Add To Cart For WooCommerce plugin \u003c= 1.4.9 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through \u003c= 1.4.9.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00397,"percentile":0.3438,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-04-01T14:52:02Z","modified":"2026-06-17T09:11:04Z","products":[{"vendor":"sharaz shahid","product":"simple sticky add to cart for woocommerce"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/sticky-add-to-cart-woo/vulnerability/wordpress-simple-sticky-add-to-cart-for-woocommerce-plugin-1-4-5-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-31854"},{"url":"https://patchstack.com/database/wordpress/plugin/sticky-add-to-cart-woo/vulnerability/wordpress-simple-sticky-add-to-cart-for-woocommerce-plugin-1-4-5-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-8cq7-m6j9-qw55"}],"sources":{"cve":[{"id":"CVE-2025-31854","title":"WordPress Simple Sticky Add To Cart For WooCommerce plugin \u003c= 1.4.9 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through \u003c= 1.4.9.","status":"published","published":"2025-04-01T14:52:02.316Z","modified":"2026-04-28T16:12:14.588Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:44.424933Z"}],"euvd":[{"id":"EUVD-2025-9175","description":"Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through \u003c= 1.4.9.","status":"published","published":"2025-04-01T14:52:02Z","modified":"2026-04-28T16:12:14Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"updated_at":"2026-11-02T19:05:45.594696Z"}],"ghsa":[{"id":"GHSA-8cq7-m6j9-qw55","title":"Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce...","description":"Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through 1.4.5.","status":"published","published":"2025-04-01T15:31:43Z","modified":"2025-04-01T15:31:53Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:00:35.09643Z"}],"nvd":[{"id":"CVE-2025-31854","description":"Missing Authorization vulnerability in Sharaz Shahid Simple Sticky Add To Cart For WooCommerce sticky-add-to-cart-woo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Simple Sticky Add To Cart For WooCommerce: from n/a through \u003c= 1.4.9.","status":"published","published":"2025-04-01T15:16:26.82Z","modified":"2026-06-17T09:11:04.24Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:57.134561Z"}]}}