Access Control Flaw in Blog Designer by Solwin Infotech
CVE-2025-57990

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Blog Designer
Vendor
CVE Published:
22 September 2025

What is CVE-2025-57990?

A vulnerability within the Blog Designer plugin by Solwin Infotech allows for the exploitation of improperly configured access control mechanisms. This flaw potentially enables unauthorized users to gain access to restricted features and data, particularly in versions from n/a to 3.1.8. It is crucial for users of the plugin to evaluate their current configurations and apply necessary security measures to mitigate potential threats.

Affected Version(s)

Blog Designer <= 3.1.8

References

https://patchstack.com/database/wordpress/plugin/blog-des...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Trương Hữu Phúc (truonghuuphuc) (Patchstack Alliance)
JSON
.