Missing Authorization Vulnerability in CBX Bookmark & Favorite by Sabuj Kundu

CVE-2025-66101

What is CVE-2025-66101?

A missing authorization vulnerability has been identified in the CBX Bookmark & Favorite plugin developed by Sabuj Kundu. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially exposing sensitive functionalities of the plugin. Versions prior to and including 2.0.1 are affected, creating a risk for any installations of this software. Website administrators using this plugin are advised to evaluate their security settings and update to secure configurations to prevent unauthorized access.

References