Authorization Flaws in Viral Loops WP Integration by Viral Loops

CVE-2025-28994

What is CVE-2025-28994?

A missing authorization vulnerability in the Viral Loops WP Integration plugin allows attackers to exploit improperly configured access controls. This security weakness affects all versions from n/a through 3.8.1, potentially granting unauthorized users elevated privileges and access to sensitive functionalities within the plugin. It is crucial for users of Viral Loops WP Integration to ensure proper authorization checks are implemented to safeguard against such vulnerabilities.

References