Authorization Flaw in VG WORT METIS Affects Access Control by vgwort
CVE-2025-50039

6.5MEDIUM

Key Information:

Vendor

WordPress
Status
Vg Wort Metis
Vendor
CVE Published:
4 July 2025

What is CVE-2025-50039?

The VG WORT METIS product from vgwort has a missing authorization vulnerability that allows attackers to exploit incorrectly configured access control security levels. This security issue can lead to unauthorized access to sensitive functionalities within the product. Affected versions include all releases up to 2.0.0, making it imperative for users to review their configurations and apply necessary security measures to mitigate potential risks.

Affected Version(s)

VG WORT METIS <= 2.0.0

References

https://patchstack.com/database/wordpress/plugin/vgw-meti...
vdb-entry

CVSS V3.1

Score:
6.5
Severity:
MEDIUM
Confidentiality:
None
Integrity:
High
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Nguyen Ngoc Quang Bach (maysbachs) (Patchstack Alliance)
.