{"id":"CVE-2025-55712","aliases":["EUVD-2025-24925","GHSA-66gx-99xq-pf73"],"status":"published","title":"WordPress The Plus Addons for Elementor Page Builder Lite Plugin \u003c= 6.3.13 - Broken Access Control Vulnerability","description":"Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through \u003c= 6.3.13.","severity":{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00248,"percentile":0.16262,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-862"],"published":"2025-08-14T18:21:26Z","modified":"2026-06-17T09:42:06Z","products":[{"vendor":"posimyth","product":"the plus addons for elementor page builder lite"}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/the-plus-addons-for-elementor-page-builder/vulnerability/wordpress-the-plus-addons-for-elementor-page-builder-lite-plugin-plugin-6-3-13-broken-access-control-vulnerability?_s_id=cve","tags":["vdb-entry"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-55712"},{"url":"https://patchstack.com/database/wordpress/plugin/the-plus-addons-for-elementor-page-builder/vulnerability/wordpress-the-plus-addons-for-elementor-page-builder-lite-plugin-plugin-6-3-13-broken-access-control-vulnerability?_s_id=cve"},{"url":"https://github.com/advisories/GHSA-66gx-99xq-pf73"}],"sources":{"cve":[{"id":"CVE-2025-55712","title":"WordPress The Plus Addons for Elementor Page Builder Lite Plugin \u003c= 6.3.13 - Broken Access Control Vulnerability","description":"Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through \u003c= 6.3.13.","status":"published","published":"2025-08-14T18:21:26.04Z","modified":"2026-04-28T16:13:37.292Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:32:52.839698Z"}],"euvd":[{"id":"EUVD-2025-24925","description":"Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through \u003c= 6.3.13.","status":"published","published":"2025-08-14T18:21:26Z","modified":"2026-04-28T16:13:37Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T19:05:35.623334Z"}],"ghsa":[{"id":"GHSA-66gx-99xq-pf73","title":"Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite...","description":"Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through 6.3.13.","status":"published","published":"2025-08-14T21:31:58Z","modified":"2025-08-14T21:32:10Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T15:03:18.603875Z"}],"nvd":[{"id":"CVE-2025-55712","description":"Missing Authorization vulnerability in POSIMYTH The Plus Addons for Elementor Page Builder Lite the-plus-addons-for-elementor-page-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects The Plus Addons for Elementor Page Builder Lite: from n/a through \u003c= 6.3.13.","status":"published","published":"2025-08-14T19:15:43.753Z","modified":"2026-06-17T09:42:06.47Z","cvss":[{"version":"3.1","score":6.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-862"],"updated_at":"2026-11-02T14:11:23.594522Z"}]}}
