CVE-2025-67584

MediumCVSS 5.3

Published: 09/12/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

Missing Authorization vulnerability in rtCamp GoDAM (godam) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects GoDAM: from n/a through <= 1.4.6.

Risk Assessment

An attacker can access functions or data they are not authorized to, potentially leading to unauthorized actions. This can compromise application and data security.

Recommendation

Update GoDAM to the latest version that fixes the vulnerability, or disable it if an update is not available. Additionally, review and correct access control configurations.

Other vulnerabilities in GoDAM

CVE-2026-14282Critical
The GoDAM plugin for WordPress up to version 1.12.2 allows unauthenticated attackers to upload arbitrary files to the server, potentially leading to remote code execution due to insufficient file type validation in the save_video_file() function.

Original NVD description (English source)

Missing Authorization vulnerability in rtCamp GoDAM godam allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GoDAM: from n/a through <= 1.4.6.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS