CVE-2025-68592

MediumCVSS 4.3

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.23%

13th percentile - higher than 13% of all known CVEs

Summary

Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Adminify from n/a through <= 4.0.6.1.

Risk Assessment

An unauthorized person may gain access to administrative functions of the plugin, potentially leading to unauthorized changes and system integrity compromise.

Recommendation

Update the WP Adminify plugin to a version newer than 4.0.6.1 and review access control configuration.

Other vulnerabilities in WP Adminify

CVE-2025-68593Medium
Missing Authorization vulnerability in WP Adminify (through version 4.0.6.1) allows exploiting incorrectly configured access control security levels.

Original NVD description (English source)

Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Adminify: from n/a through <= 4.0.6.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS