Authorization Flaw in ZEEN101 Leaky Paywall allows Unauthorized Access

CVE-2025-66124

What is CVE-2025-66124?

A missing authorization vulnerability exists within the ZEEN101 Leaky Paywall plugin, specifically affecting versions up to 4.22.5. This flaw arises from incorrectly configured access control security levels, which can permit malicious actors to gain unauthorized access to restricted content. If not addressed, this vulnerability can compromise the security of sensitive user data and lead to exploitation of the affected website. It is vital for administrators using this plugin to apply the recommended patches to mitigate this risk and enhance their site's security.

References