Missing Authorization Vulnerability in Saoshyant Page Builder by Saoshyant.1994

CVE-2025-22560

Summary

The Saoshyant Page Builder plugin for WordPress by Saoshyant.1994 contains a missing authorization vulnerability that enables attackers to exploit improperly configured access control security levels. This flaw can lead to unauthorized access, allowing malicious actors to manipulate content or perform actions beyond the intended permissions. The issue spans from the initial release up to version 3.8, highlighting the necessity of implementing robust access controls to safeguard web applications.

References