Missing Authorization Issue in Sovica Target Video Easy Publish
CVE-2025-32688

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Target Video Easy Publish
Vendor
CVE Published:
9 September 2025

What is CVE-2025-32688?

A missing authorization vulnerability exists in Sovica's Target Video Easy Publish, allowing potentially unauthorized users to execute actions without appropriate permissions. This flaw affects versions from n/a through 3.8.8, potentially compromising the integrity of user data and the security of the publishing platform.

Affected Version(s)

Target Video Easy Publish <= 3.8.8

References

https://patchstack.com/database/wordpress/plugin/brid-vid...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Phan Trong Quan - VNPT Cyber Immunity (Patchstack Alliance)
.
CVE-2025-32688 : Missing Authorization Issue in Sovica Target Video Easy Publish