Missing Authorization Flaw in Pixelite Meta Tag Manager by WordPress
CVE-2025-22260

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Meta Tag Manager
Vendor
CVE Published:
3 February 2025

What is CVE-2025-22260?

A missing authorization vulnerability exists in the Pixelite Meta Tag Manager. This flaw allows unauthorized users to access sensitive functionalities, potentially leading to unauthorized changes in meta tags and overall site behavior. The issue affects all versions from n/a through 3.1, highlighting the importance of proper access control mechanisms in ensuring the security of your WordPress site.

Affected Version(s)

Meta Tag Manager <= 3.1

References

https://patchstack.com/database/wordpress/plugin/meta-tag...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Rafie Muhammad (Patchstack)
.