PT-2025-54372 · Unknown · Gs Portfolio For Envato

Legion Hunter · Published 2025-12-31 · Updated 2026-01-01 · CVE-2025-62755

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions GS Portfolio for Envato versions 1.4.2 and earlier

Description An unauthenticated broken access control issue exists in GS Portfolio for Envato. This allows unauthorized access to resources.

Recommendations Update GS Portfolio for Envato to a version later than 1.4.2.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-62755

Affected Products

Gs Portfolio For Envato

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-62755 · Security Note
• https://twitter.com/CVEnew/status/2006736819455668447 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/gs-envato-portfolio/vulnerability/wordpress-gs-portfolio-for-envato-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/wordpress/plugin/gs-envato-portfolio/vulnerability/wordpress-gs-portfolio-for-envato-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/2006415054229402059 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/gs-envato-portfolio/vulnerability/wordpress-gs-portfolio-for-envato-plugin-1-4-2-broken-access-control-vulnerability?_s_id=cve · Note