{"id":"CVE-2025-32226","aliases":["EUVD-2025-9815","GHSA-j95j-frq6-6x8g"],"status":"published","title":"WordPress Display product variations dropdown on shop page plugin \u003c= 1.1.3 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display product variations dropdown on shop page: from n/a through \u003c= 1.1.3.","severity":{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.00438,"percentile":0.3842,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-04-04T15:59:15Z","modified":"2026-06-17T09:11:38Z","products":[{"vendor":"anzar ahmed","product":"display product variations dropdown on shop page"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/display-product-variations-dropdown-on-shop-page/vulnerability/wordpress-display-product-variations-dropdown-on-shop-page-plugin-1-1-3-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-32226"},{"url":"https://patchstack.com/database/wordpress/plugin/display-product-variations-dropdown-on-shop-page/vulnerability/wordpress-display-product-variations-dropdown-on-shop-page-plugin-1-1-3-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-j95j-frq6-6x8g"}],"sources":{"cve":[{"id":"CVE-2025-32226","title":"WordPress Display product variations dropdown on shop page plugin \u003c= 1.1.3 - Broken Access Control vulnerability","description":"Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display product variations dropdown on shop page: from n/a through \u003c= 1.1.3.","status":"published","published":"2025-04-04T15:59:15.993Z","modified":"2026-05-12T00:02:37.155Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:46.42892Z"}],"euvd":[{"id":"EUVD-2025-9815","description":"Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display product variations dropdown on shop page: from n/a through \u003c= 1.1.3.","status":"published","published":"2025-04-04T15:59:15Z","modified":"2026-05-12T00:02:37Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"updated_at":"2026-11-02T19:04:40.276379Z"}],"ghsa":[{"id":"GHSA-j95j-frq6-6x8g","title":"Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop...","description":"Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Display product variations dropdown on shop page: from n/a through 1.1.3.","status":"published","published":"2025-04-04T18:31:02Z","modified":"2025-04-04T18:31:03Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:00:48.250813Z"}],"nvd":[{"id":"CVE-2025-32226","description":"Missing Authorization vulnerability in Anzar Ahmed Display product variations dropdown on shop page display-product-variations-dropdown-on-shop-page allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Display product variations dropdown on shop page: from n/a through \u003c= 1.1.3.","status":"published","published":"2025-04-04T16:15:31.863Z","modified":"2026-06-17T09:11:38.707Z","cvss":[{"version":"3.1","score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:10:59.48027Z"}]}}