CVE-2025-58979

MediumCVSS 5.3

Published: 09/09/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

11th percentile - higher than 11% of all known CVEs

Summary

The BerqWP plugin (versions up to 2.2.53) has a missing authorization vulnerability. This allows exploitation of incorrectly configured access control security levels.

Risk Assessment

Unauthorized users could perform actions reserved for higher privileges, potentially leading to configuration changes or data exposure.

Recommendation

Update the BerqWP plugin to the latest version (above 2.2.53) or review and correct the permission configuration.

Other vulnerabilities in BerqWP

CVE-2026-78528Medium
Unauthenticated Broken Access Control in BerqWP <= 4.1.15 versions. The vulnerability allows bypassing access controls without authentication.

Original NVD description (English source)

Missing Authorization vulnerability in BerqWP BerqWP searchpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects BerqWP: from n/a through <= 2.2.53.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS