Authorization Flaw in NotFound WP Journal Affects Access Control Security Levels

CVE-2025-23613

Summary

A Missing Authorization vulnerability has been identified in the NotFound WP Journal plugin, allowing attackers to exploit incorrectly configured access control security levels. This vulnerability puts user data at risk by potentially granting unauthorized access to sensitive functionalities within the plugin. Users of NotFound WP Journal versions up to and including 1.1 are encouraged to review their access settings and apply necessary safeguards to mitigate the associated risks.

References