Missing Authorization Vulnerability in VeronaLabs WP SMS Plugin
CVE-2025-62006

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
WP Sms
Vendor
CVE Published:
22 October 2025

What is CVE-2025-62006?

The WP SMS plugin by VeronaLabs is affected by a missing authorization vulnerability that allows unauthorized users to access restricted functions. This issue affects versions up to 7.0.1, posing significant risks for unpatched systems. Attackers can exploit this flaw to gain access to sensitive information and functionalities without proper permissions, potentially resulting in data leakage or manipulation.

Affected Version(s)

WP SMS <= n/a

References

https://vdp.patchstack.com/database/Wordpress/Plugin/wp-s...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Denver Jackson (Patchstack Alliance)
JSON
.