CVE-2025-59551

MediumCVSS 4.3

Published: 22/09/2025(UTC)Updated: 11/10/2026(UTC)Translated: 12/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

The Revive.so plugin for WordPress in versions up to and including 2.0.6 contains a Missing Authorization vulnerability. It enables exploitation of incorrectly configured access control security levels.

Risk Assessment

An unauthorized user may perform operations they should not have access to, potentially leading to unauthorized changes on the site.

Recommendation

Update the Revive.so plugin to the latest version and review the permission configuration in WordPress.

Other vulnerabilities in Revive.so

CVE-2026-39561Medium
The Revive.so plugin for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.

Original NVD description (English source)

Missing Authorization vulnerability in WP Chill Revive.so revive-so allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Revive.so: from n/a through <= 2.0.6.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS