PT-2026-6251 · WordPress · Wp Sync For Notion

Published 2026-02-03 · Updated 2026-02-03 · CVE-2026-25020

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions WP Sync for Notion versions through 1.7.0

Description An issue exists in WP Sync for Notion where incorrectly configured access control security levels can be exploited, leading to a missing authorization condition.

Recommendations Update WP Sync for Notion to a version later than 1.7.0.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-25020

Affected Products

Wp Sync For Notion

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-25020 · Security Note
• https://patchstack.com/database/Wordpress/Plugin/wp-sync-for-notion/vulnerability/wordpress-wp-sync-for-notion-plugin-1-7-0-broken-access-control-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/43609 · Telegram Post
• https://twitter.com/CVEnew/status/2018696362863591587 · Twitter Post