Privilege Escalation Vulnerability in John Luetke Media Author by WordPress

CVE-2025-58841

What is CVE-2025-58841?

An Incorrect Privilege Assignment vulnerability has been identified in the John Luetke Media Author plugin, potentially allowing unauthorized users to escalate their privileges. This issue affects versions from n/a up to 1.0.4, enabling attackers to gain access to restricted functionalities within the application. It is crucial for users to ensure they update their installations to mitigate this security risk.

References