Unauthorized Access Vulnerability in WordPress Single Sign-On Plugin
CVE-2025-6003
5.3MEDIUM
Key Information:
What is CVE-2025-6003?
The Single Sign-On (SSO) plugin for WordPress is susceptible to unauthorized access due to a misconfigured capability check in its functionality. This vulnerability allows unauthenticated attackers to access sensitive data that is typically restricted to specific user roles, potentially exposing private site content. It is crucial for users of the affected plugin versions to promptly implement security measures or updates to mitigate this risk.
Affected Version(s)
WordPress Single Sign-On (SSO) - Multisite All-Inclusive * <= 50.5.3
WordPress Single Sign-On (SSO) - Multisite Enterprise * <= 40.5.3
WordPress Single Sign-On (SSO) - Multisite Premium * <= 30.5.3