CVE-2025-11269
Last modified
CVE-2025-11269 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings.. EPSS estimates a 0.26% chance of exploitation in the next 30 days.
Description
The Product Filter by WBW plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'approveNotice' action in all versions up to, and including, 3.0.0. This makes it possible for unauthenticated attackers to update the plugin's settings.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2025-11269?
How severe is CVE-2025-11269?
How do I fix CVE-2025-11269?
How Strix Helps
- Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-11262The Link Whisper Free plugin for WordPress is vulnerable to …7.2
- CVE-2025-11263The Link Whisper Free plugin for WordPress is vulnerable to …6.1
- CVE-2025-11265The VK All in One Expansion Unit plugin for WordPress is vul…6.4
- CVE-2025-11266An out-of-bounds write vulnerability exists in the Grassroot…6.8
- CVE-2025-11267The VK All in One Expansion Unit plugin for WordPress is vul…6.4
- CVE-2025-11268The Strong Testimonials plugin for WordPress is vulnerable t…4.3
- CVE-2025-1127The vulnerability can be leveraged by an attacker to execute…9.1
- CVE-2025-11270The Gutenberg Essential Blocks – Page Builder for Gutenberg …6.4
- CVE-2025-11271The Easy Digital Downloads plugin for WordPress is vulnerabl…5.3
- CVE-2025-11272A vulnerability has been found in SeriaWei ZKEACMS up to 4.3…5.4
- CVE-2025-11273A vulnerability was found in LaChatterie Verger up to 1.2.10…6.3
- CVE-2025-11274A vulnerability was determined in Open Asset Import Library …5.5
Are you affected by CVE-2025-11269?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST