Missing Authorization Vulnerability in Wilson OpenAI Tools for WordPress & WooCommerce

CVE-2025-31843

What is CVE-2025-31843?

The Wilson OpenAI Tools for WordPress & WooCommerce contains a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This flaw could enable unauthorized access to restricted functionalities, affecting the security and integrity of affected sites using versions n/a through 2.1.5 of the plugin. Organizations using this product should apply the necessary updates to mitigate risks associated with this vulnerability.

References