CVE-2025-68593

MediumCVSS 5.4

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

15th percentile - higher than 15% of all known CVEs

Summary

Missing Authorization vulnerability in WP Adminify (through version 4.0.6.1) allows exploiting incorrectly configured access control security levels.

Risk Assessment

An unauthorized user may gain access to administrative functions, leading to unauthorized changes.

Recommendation

Update the WP Adminify plugin to the latest version that includes the security fix.

Other vulnerabilities in WP Adminify

CVE-2025-68592Medium
Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WP Adminify from n/a through <= 4.0.6.1.

Original NVD description (English source)

Missing Authorization vulnerability in Liton Arefin WP Adminify adminify allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Adminify: from n/a through <= 4.0.6.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS