CVE-2025-31752

{"id": "CVE-2025-31752", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-31752", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-04-01T20:32:48.354644Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "audit@patchstack.com", "affectedData": [{"vendor": "termel", "product": "Bulk Fields Editor", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "1.8.0"}], "packageName": "bulk-user-editor", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}]}], "published": "2025-04-01T15:16:11.690", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/bulk-user-editor/vulnerability/wordpress-bulk-fields-editor-plugin-1-8-0-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in termel Bulk Fields Editor bulk-user-editor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Bulk Fields Editor: from n/a through <= 1.8.0."}, {"lang": "es", "value": "La vulnerabilidad de falta de autorizaci\u00f3n en termel Bulk Fields Editor permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al editor de campos masivos desde la versi\u00f3n n/d hasta la 1.8.0."}], "lastModified": "2026-06-17T09:10:53.240", "sourceIdentifier": "audit@patchstack.com"}