CVE-2025-69353

MediumCVSS 4.3

Published: 06/01/2026(UTC)Updated: 14/10/2026(UTC)Translated: 14/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Missing Authorization vulnerability in Proxy & VPN Blocker allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Proxy & VPN Blocker: from n/a through <= 3.5.3.

Risk Assessment

An unauthorized user may gain access to functions or data they should not have permissions for. This may lead to a security breach of the WordPress site.

Recommendation

Update the Proxy & VPN Blocker plugin to a version later than 3.5.3. Review and correct access control configuration.

Other vulnerabilities in Proxy & VPN Blocker

CVE-2026-57399High
The Proxy & VPN Blocker WordPress plugin contains a Stored Cross-Site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. This affects versions up to and including 3.5.8.

Original NVD description (English source)

Missing Authorization vulnerability in Proxy & VPN Blocker Proxy & VPN Blocker proxy-vpn-blocker allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Proxy & VPN Blocker: from n/a through <= 3.5.3.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS