PT-2025-17586 · Nebojsa+1 · Target Video Easy Publish

Phan Trong Quan - Vnpt Cyber Immunity · CVE-2025-32688 · Published 2025-04-22 · Updated 2025-09-09

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions: Target Video Easy Publish versions through 3.8.8

Description: A missing authorization issue exists in Sovica Target Video Easy Publish. The vulnerability is related to a privilege escalation within the WordPress Shortcode do shortcode function.

Recommendations: Update Target Video Easy Publish to a version later than 3.8.8.

Fix

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-32688

Affected Products

Target Video Easy Publish

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-32688 · Security Note
• https://patchstack.com/database/wordpress/plugin/brid-video-easy-publish/vulnerability/wordpress-target-video-easy-publish-plugin-3-8-5-arbitrary-shortcode-execution-vulnerability?_s_id=cve · Note
• https://twitter.com/WolfgangSesin/status/1914664911793271249 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/brid-video-easy-publish/vulnerability/wordpress-target-video-easy-publish-plugin-3-8-5-arbitrary-shortcode-execution-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1965456741061058872 · Twitter Post