Missing Authorization Vulnerability in WP Shuffle WP Subscription Forms
CVE-2025-39591

Currently unrated

Key Information:

Vendor

WordPress
Status
WP Subscription Forms
Vendor
CVE Published:
16 April 2025

What is CVE-2025-39591?

A missing authorization vulnerability exists in the WP Shuffle WP Subscription Forms plugin, allowing attackers to exploit incorrectly configured access control security levels. This affects all versions from n/a through 1.2.3, potentially leading to unauthorized access to sensitive features or data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://patchstack.com/database/wordpress/plugin/wp-subsc...

Timeline

  • Vulnerability published

JSON
.