CVE-2025-68585
LowCVSS 2.7Exploitation Probability (EPSS)
Low risk14th percentile - higher than 14% of all known CVEs
Summary
The WP Document Revisions plugin for WordPress (versions up to and including 3.7.2) contains a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels.
Risk Assessment
Unauthorized users may gain access to functions that should be protected, potentially leading to unauthorized modifications or data leakage.
Recommendation
Update the WP Document Revisions plugin to the latest available version if a patch exists, or restrict access to it.
Other vulnerabilities in WP Document Revisions
Original NVD description (English source)
Missing Authorization vulnerability in Ben Balter WP Document Revisions wp-document-revisions allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Document Revisions: from n/a through <= 3.7.2.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS