CVE-2025-62013

MediumCVSS 4.3

Published: 22/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

The WordPress UiChemy plugin (versions up to 4.0.0) contains a Missing Authorization vulnerability due to incorrectly configured access control security levels. This enables exploitation of misconfigured security mechanisms.

Risk Assessment

An attacker can perform unauthorized operations on the site, potentially leading to content or configuration modification and privilege escalation.

Recommendation

Upgrade UiChemy to a version newer than 4.0.0. Review and correct permission configuration in WordPress.

Other vulnerabilities in UiChemy

CVE-2025-69362Medium
The UiChemy plugin for WordPress is vulnerable to Stored XSS due to improper neutralization of input during web page generation. This issue affects versions from n/a through 4.4.2.

Original NVD description (English source)

Missing Authorization vulnerability in POSIMYTH UiChemy uichemy.This issue affects UiChemy: from n/a through <= 4.0.0.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS