CVE-2025-62914

MediumCVSS 6.5

Published: 06/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

The Effect Maker plugin by anibalwainstein contains a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects Effect Maker from n/a through <= 1.2.1.

Risk Assessment

An attacker can exploit the missing authorization to access functions that should be protected, potentially leading to unauthorized changes or data leakage.

Recommendation

Update the Effect Maker plugin to the latest version that includes security fixes. Additionally, review access control configuration and restrict permissions.

Other vulnerabilities in Effect Maker

CVE-2025-68867Medium
The Effect Maker plugin (up to version 1.2.1) contains a DOM-Based XSS vulnerability due to improper neutralization of input during web page generation. This allows an attacker to execute malicious scripts in the context of the victim's browser.

Original NVD description (English source)

Missing Authorization vulnerability in anibalwainstein Effect Maker effect-maker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Effect Maker: from n/a through <= 1.2.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS