PT-2025-54350 · Quadlayers · Quadlayers Tiktok Feed

Legion Hunter · Published 2025-12-31 · Updated 2026-01-01 · CVE-2025-63016

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions QuadLayers TikTok Feed versions through 4.6.4

Description A missing authorization issue exists in Quadlayers QuadLayers TikTok Feed due to incorrectly configured access control security levels. The issue allows exploitation of the access control settings.

Recommendations Update QuadLayers TikTok Feed to a version later than 4.6.4.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-63016

Affected Products

Quadlayers Tiktok Feed

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-63016 · Security Note
• https://twitter.com/CVEnew/status/2006736824094568600 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/wp-tiktok-feed/vulnerability/wordpress-quadlayers-tiktok-feed-plugin-4-6-4-broken-access-control-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/wp-tiktok-feed/vulnerability/wordpress-quadlayers-tiktok-feed-plugin-4-6-4-broken-access-control-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/wp-tiktok-feed/vulnerability/wordpress-quadlayers-tiktok-feed-plugin-4-6-4-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2006499512529965420 · Twitter Post