Authorization Flaw in Tyche Softwares Arconix Shortcodes Plugin

CVE-2025-66085

What is CVE-2025-66085?

A significant missing authorization vulnerability has been identified in the Arconix Shortcodes plugin developed by Tyche Softwares. This flaw allows malicious actors to exploit incorrectly configured access control security levels, potentially granting unauthorized access to sensitive functionalities within the plugin. The issue impacts all versions up to and including 2.1.18, emphasizing the importance of timely updates and proper configuration to safeguard against potential exploits.

References