Access Control Vulnerability in Ays Pro Easy Form Plugin by WordPress

CVE-2025-66117

What is CVE-2025-66117?

Ays Pro Easy Form plugin for WordPress is impacted by a missing authorization vulnerability, which arises from incorrectly configured access control security settings. This flaw permits unauthorized users to exploit the system, potentially accessing sensitive information or performing tasks beyond their assigned permissions. The issue affects all versions from n/a up to and including 2.7.8, necessitating immediate attention from website administrators to secure their installations against potential exploits.

References