PT-2025-47754 · Unknown · Arconix Shortcodes

Published 2025-11-21 · Updated 2025-11-21 · CVE-2025-66085

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Arconix Shortcodes versions through 2.1.18

Description An issue exists in Arconix Shortcodes related to incorrectly configured access control security levels, potentially allowing unauthorized access. The vulnerability involves a missing authorization check.

Recommendations Update Arconix Shortcodes to a version later than 2.1.18.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-66085

Affected Products

Arconix Shortcodes

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-66085 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/arconix-shortcodes/vulnerability/wordpress-arconix-shortcodes-plugin-2-1-18-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/arconix-shortcodes/vulnerability/wordpress-arconix-shortcodes-plugin-2-1-18-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1991855991634513967 · Twitter Post