PT-2025-52264 · Amentotech · Tuturn

Tran Nguyen Bao Khanh · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-64236

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions AmentoTech Tuturn versions prior to 3.6

Description An authentication bypass issue exists in AmentoTech Tuturn, allowing for authentication abuse through the use of an alternate path or channel.

Recommendations Update AmentoTech Tuturn to version 3.6 or later.

Fix

Authentication Bypass Using an Alternate Path or Channel

Weakness Enumeration

CWE-288

Related Identifiers

CVE-2025-64236

Affected Products

Tuturn

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-64236 · Security Note
• https://patchstack.com/database/wordpress/plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-broken-authentication-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-broken-authentication-vulnerability?_s_id=cve · Note
• https://twitter.com/CveFindCom/status/2001708794351358138 · Twitter Post
• https://twitter.com/TheHackerWire/status/2001714979796586817 · Twitter Post
• https://twitter.com/CVEnew/status/2001728013977948625 · Twitter Post
• https://t.me/CVEtracker/40172 · Telegram Post
• https://vdp.patchstack.com/database/wordpress/plugin/tuturn/vulnerability/wordpress-tuturn-plugin-3-6-broken-authentication-vulnerability?_s_id=cve · Note