CVE-2025-67578

MediumCVSS 5.3

Published: 09/12/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The WP Email Capture plugin (by Rhys Wynne) contains a Missing Authorization vulnerability that allows exploiting incorrectly configured access control security levels. This issue affects WP Email Capture from n/a through <= 3.12.4.

Risk Assessment

The risk is that unauthorized users may gain access to functions or data that should be protected, which could lead to a breach of confidentiality or integrity of the system.

Recommendation

It is recommended to update the WP Email Capture plugin to the latest version that includes a fix for this vulnerability.

Other vulnerabilities in WP Email Capture

CVE-2025-68529Medium
CSRF vulnerability in WP Email Capture up to version 3.12.5. Allows an attacker to perform unauthorized actions in the context of a logged-in user.

Original NVD description (English source)

Missing Authorization vulnerability in Rhys Wynne WP Email Capture wp-email-capture allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Email Capture: from n/a through <= 3.12.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS