Missing Authorization Flaw in Wappointment by Wappointment Team
CVE-2025-68575

Currently unrated

Key Information:

Vendor

WordPress

Vendor
CVE Published:
24 December 2025

What is CVE-2025-68575?

The Wappointment plugin for WordPress suffers from a Missing Authorization vulnerability that allows unauthorized users to exploit incorrectly configured access control security levels. This flaw affects versions of Wappointment up to 2.7.2, potentially allowing attackers to gain unauthorized access to sensitive areas of the website or application, thereby compromising user safety and data integrity. Proper configuration and timely updates are essential to mitigate these risks.

Affected Version(s)

Wappointment <= n/a

References

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

daroo | Patchstack Bug Bounty Program
.
CVE-2025-68575 : Missing Authorization Flaw in Wappointment by Wappointment Team