Missing Authorization Vulnerability in Sermon Manager by wpforchurch

CVE-2025-63002

What is CVE-2025-63002?

A missing authorization vulnerability exists in the Sermon Manager plugin for WordPress, enabling attackers to exploit improperly configured access control levels. This flaw allows unauthorized users to gain access to sensitive functions within the Sermon Manager from versions n/a up to 2.30.0, potentially resulting in unauthorized manipulation of sermon data. Website administrators are urged to review their access control configurations and apply necessary updates to mitigate this risk.

References