Missing Authorization Vulnerability in Residential Address Detection by NotFound

CVE-2025-27270

What is CVE-2025-27270?

A vulnerability identified in NotFound's Residential Address Detection plugin allows unauthorized users to escalate privileges. This flaw primarily stems from a lack of proper authorization checks within the system. As a result, malicious actors could exploit this loophole to gain elevated access that should otherwise be restricted, potentially leading to unauthorized actions within the application. It is critical for users of versions up to 2.5.4 to apply necessary patches and safeguard their installations.

References