CVE-2025-49982

{"id": "CVE-2025-49982", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-49982", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2025-06-20T17:52:40.175820Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "audit@patchstack.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "NONE"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "audit@patchstack.com", "affectedData": [{"vendor": "aguilatechnologies", "product": "WP Customer Area", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "8.3.4"}], "packageName": "customer-area", "collectionURL": "https://wordpress.org/plugins", "defaultStatus": "unaffected"}]}], "published": "2025-06-20T15:15:24.000", "references": [{"url": "https://patchstack.com/database/Wordpress/Plugin/customer-area/vulnerability/wordpress-wp-customer-area-plugin-8-2-5-broken-access-control-vulnerability?_s_id=cve", "source": "audit@patchstack.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "audit@patchstack.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "Missing Authorization vulnerability in aguilatechnologies WP Customer Area customer-area allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Customer Area: from n/a through <= 8.3.4."}, {"lang": "es", "value": "La vulnerabilidad de falta de autorizaci\u00f3n en aguilatechnologies WP Customer Area permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al \u00c1rea de Clientes de WP desde n/d hasta la versi\u00f3n 8.2.5."}], "lastModified": "2026-06-17T09:32:15.210", "sourceIdentifier": "audit@patchstack.com"}