CVE-2025-63031

MediumCVSS 5.3

Published: 31/12/2025(UTC)Updated: 28/10/2026(UTC)Translated: 28/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

11th percentile - higher than 11% of all known CVEs

Summary

The WordPress plugin EasyTest – Simplify A/B Testing through 1.0.1 contains a missing authorization vulnerability allowing exploitation of incorrectly configured access control security levels.

Risk Assessment

Actions reserved for authorized users may be performed by users without the appropriate privileges.

Recommendation

Update the EasyTest – Simplify A/B Testing plugin to a version newer than 1.0.1 that contains the access control fix.

Other vulnerabilities in EasyTest – Simplify A/B Testing

CVE-2026-68567High
A Cross-site Scripting (DOM-Based XSS) vulnerability in the WordPress plugin EasyTest – Simplify A/B Testing stems from improper input neutralization during web page generation. Affects versions up to and including 1.0.1.

Original NVD description (English source)

Missing Authorization vulnerability in WP Grids EasyTest – Simplify A/B Testing convertpro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects EasyTest – Simplify A/B Testing: from n/a through 1.0.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS