Broken Access Control in Effect Maker by Anibal Wainstein

CVE-2025-62914

What is CVE-2025-62914?

A missing authorization vulnerability exists in the Effect Maker plugin developed by Anibal Wainstein, which can lead to improperly configured access control levels. This issue may allow attackers to exploit the plugin and perform unauthorized actions, particularly in versions up to 1.2.1. It is essential for users of the affected versions to review their security settings and apply necessary mitigations to safeguard their WordPress sites from potential exploits.

References