CVE-2025-62033

MediumCVSS 6.5

Published: 06/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

21th percentile - higher than 21% of all known CVEs

Summary

The Togo plugin (versions < 1.0.4) contains a Missing Authorization vulnerability that allows exploitation of incorrectly configured access control security levels. This may lead to unauthorized access to functions or data.

Risk Assessment

An unauthorized user may gain access to protected resources or perform actions reserved for authorized users, potentially compromising site security.

Recommendation

Update the Togo plugin to version 1.0.4 or later. Verify that all endpoints require proper authorization.

Other vulnerabilities in Togo

CVE-2025-62037Medium
Missing Authorization vulnerability in Togo by uxper. Affects versions before 1.0.4.

Original NVD description (English source)

Missing Authorization vulnerability in uxper Togo togo.This issue affects Togo: from n/a through < 1.0.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS