PT-2025-39577 · Unknown · Wedos Global

Nabil Irawan · CVE-2025-60130 · Published 2025-09-26 · Updated 2025-09-26

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WEDOS Global versions through 1.2.2

Description A missing authorization issue exists in WEDOS Global, allowing access to functionality that is not properly constrained by Access Control Lists (ACLs). This could allow unauthorized access to sensitive features or data.

Recommendations Update WEDOS Global to a version later than 1.2.2.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-60130

Affected Products

Wedos Global

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-60130 · Security Note
• https://patchstack.com/database/wordpress/plugin/wgpwpp/vulnerability/wordpress-wedos-global-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/wgpwpp/vulnerability/wordpress-wedos-global-plugin-1-2-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1971499208437014561 · Twitter Post