Authorization Bypass Vulnerability in PalsCode Support Genix
CVE-2025-30777

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Support Genix
Vendor
CVE Published:
27 March 2025

What is CVE-2025-30777?

PalsCode Support Genix has a critical vulnerability that allows attackers to bypass authorization controls. This occurs due to improperly configured access security levels, enabling unauthorized access to sensitive areas and resources within the application. Users of Support Genix versions up to 1.4.11 are at risk, as the improper access configuration can lead to exploitation. It is essential for users to review their configurations and apply recommended security practices to safeguard against potential attacks.

Affected Version(s)

Support Genix 0 <= 1.4.11

References

https://patchstack.com/database/Wordpress/Plugin/support-...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

astra.r3verii (Patchstack Alliance)
.