CVE-2025-47529
Missing Authorization vulnerability in UX Design Experts Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin experto-cta-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin: from n/a through <= 1.1.1.
- Score
- CVSS 3.1 6.5 Medium
- Status
- Deferred - audit@patchstack.com
- Published
- 2025-05-23
- Last modified
- 2026-04-28
- Weaknesses
- CWE-862
Affected products
- Experto Cta Widget Call To Action (Ux Design Experts)
- Floating Button Plugin (Ux Design Experts)
- Sticky Cta (Ux Design Experts)
References
- https://patchstack.com/database/Wordpress/Plugin/experto-cta-widget/vulnerability/wordpress-experto-cta-widget-call-to-…
