CVE-2025-6786

The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login on a password protected post after the page has loaded. This makes it possible for unauthenticated attackers to read posts they should not have access to.

• CWE-284

• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3332723%40doccheck-login&new=3332723%40doccheck-login&sfp_email=&sfph_mail=
• https://wordpress.org/plugins/doccheck-login/
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0739b5ec-b1c4-4451-97c1-f8d5ed26a2d5?source=cve

Published

Jul 4, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-67853A flaw was found in Moodle. A remote attacker could exploit …7.5
• CVE-2025-67855A flaw was found in mooodle. A remote attacker could exploit…6.1
• CVE-2025-67856A flaw was found in Moodle. An authorization logic flaw, spe…9.8
• CVE-2025-67857A flaw was found in moodle. During anonymous assignment subm…5.3
• CVE-2025-67858A Improper Neutralization of Argument Delimiters vulnerabili…7
• CVE-2025-67859A Improper Authentication vulnerability in TLP allows local …5.1
• CVE-2025-67860A vulnerability has been identified in the NeuVector scanner…3.8
• CVE-2025-67862An Internal Asset Exposed to Unsafe Debug Access Level or St…6.7
• CVE-2025-67863Rejected reason: Not used
• CVE-2025-67864Rejected reason: Not used
• CVE-2025-67865Rejected reason: Not used
• CVE-2025-67866Rejected reason: Not used