Missing Authorization Vulnerability in IdeaPush by Northern Beaches Websites

CVE-2025-24607

Summary

A missing authorization vulnerability exists in the IdeaPush plugin by Northern Beaches Websites, allowing unauthorized access due to insecure access control configurations. Attackers may exploit this flaw to gain access to restricted functionalities and data, potentially compromising the integrity and confidentiality of affected systems. This issue impacts versions of IdeaPush up to 8.71 and requires immediate attention to mitigate risks associated with unauthorized access.

References