CVE-2025-58679

MediumCVSS 5.3

Published: 22/09/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

19th percentile - higher than 19% of all known CVEs

Summary

The AppMySite plugin (versions up to 3.15.0) has a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

Risk Assessment

An attacker could gain access to functions or data they are not authorized to access. This may lead to unauthorized changes or information disclosure.

Recommendation

Update the plugin to a version higher than 3.15.0. Review and correct access control configuration.

Other vulnerabilities in AppMySite

CVE-2026-94498Medium
Broken Access Control vulnerability in the AppMySite plugin in versions up to and including 3.15.4. The vulnerability can be exploited by an unauthenticated attacker.

Original NVD description (English source)

Missing Authorization vulnerability in AppMySite AppMySite appmysite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AppMySite: from n/a through <= 3.15.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS