{"cve":"CVE-2025-62116","enrichment":{"created":"2026-01-05T10:17:10.568969+00:00","updated":"2026-04-29T18:00:13.926497+00:00","vendors":["wordpress","wordpress$PRODUCT$wordpress"]},"epss":{"score":0.00204},"mitre":{"cpes":[],"created":"2025-12-31T15:39:13.222000+00:00","description":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/62xxx/CVE-2025-62116.json","references":["https://patchstack.com/database/Wordpress/Plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"],"title":"WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability","updated":"2026-04-28T16:14:02.199000+00:00","vendors":[],"weaknesses":["CWE-862"]},"nvd":{"cpes":[],"created":"2025-12-31T16:15:44.867000+00:00","description":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.2.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-62116.json","references":["https://patchstack.com/database/Wordpress/Plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"],"title":null,"updated":"2026-09-23T17:10:00.210000+00:00","vendors":[],"weaknesses":["CWE-862"]},"opencve":{"changes":[{"created":"2025-12-31T15:45:00+00:00","data":[{"details":{"new":"Missing Authorization vulnerability in Quadlayers AI Copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through 1.4.7.","old":null},"type":"description"},{"details":{"new":"WordPress AI Copilot plugin <= 1.4.7 - Broken Access Control vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-862"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://vdp.patchstack.com/database/wordpress/plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"0716d7aa-0ff7-42ee-b402-579734e9be9b"},{"created":"2025-12-31T17:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"ff2ebcbe-67be-464e-8339-b1afa6d0e3a7"},{"created":"2026-01-05T10:45:00+00:00","data":[{"details":["wordpress","wordpress$PRODUCT$wordpress"],"type":"first_time"},{"details":{"added":["wordpress","wordpress$PRODUCT$wordpress"],"removed":[]},"type":"vendors"}],"id":"e7b6ce1e-02d9-45c2-8db3-8f74a798dd65"},{"created":"2026-01-20T14:45:00+00:00","data":[{"details":{"added":["https://patchstack.com/database/wordpress/plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"],"removed":[]},"type":"references"}],"id":"82a0b0a6-9dc5-4dbc-be01-0ca4e955e6f7"},{"created":"2026-01-20T15:30:00+00:00","data":[{"details":{"added":[],"removed":["https://vdp.patchstack.com/database/wordpress/plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"]},"type":"references"}],"id":"8378ff91-4cd3-4273-b5da-74968f1dd8af"},{"created":"2026-04-01T23:45:00+00:00","data":[{"details":{"new":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.2.","old":"Missing Authorization vulnerability in Quadlayers AI Copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through 1.4.7."},"type":"description"},{"details":{"new":"WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability","old":"WordPress AI Copilot plugin <= 1.4.7 - Broken Access Control vulnerability"},"type":"title"},{"details":{"added":["https://patchstack.com/database/Wordpress/Plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"],"removed":["https://patchstack.com/database/wordpress/plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"]},"type":"references"},{"details":{"added":{},"removed":{"cvssV3_1":{"score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}},"updated":{}},"type":"metrics"}],"id":"b0f1b3aa-ece7-4250-8b25-5d83745fee6e"},{"created":"2026-04-23T15:00:00+00:00","data":[{"details":{"new":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.5.","old":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.2."},"type":"description"},{"details":{"new":"WordPress AI Copilot plugin <= 1.5.5 - Broken Access Control vulnerability","old":"WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability"},"type":"title"},{"details":{"added":{"cvssV3_1":{"score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"33151977-2102-47b6-9cb6-35289864c3a1"},{"created":"2026-04-28T18:30:00+00:00","data":[{"details":{"new":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.2.","old":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.5."},"type":"description"},{"details":{"new":"WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability","old":"WordPress AI Copilot plugin <= 1.5.5 - Broken Access Control vulnerability"},"type":"title"}],"id":"4d6eedf1-ef54-48ad-b981-41958908be97"}],"cpes":{"data":[],"providers":[]},"created":{"data":"2025-12-31T15:39:13.222000+00:00","provider":"mitre"},"description":{"data":"Missing Authorization vulnerability in quadlayers AI Copilot ai-copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through <= 1.5.2.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":5.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00204},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://patchstack.com/database/Wordpress/Plugin/ai-copilot/vulnerability/wordpress-ai-copilot-plugin-1-4-7-broken-access-control-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress AI Copilot plugin <= 1.5.2 - Broken Access Control vulnerability","provider":"mitre"},"updated":{"data":"2026-04-28T16:14:02.199000+00:00","provider":"mitre"},"vendors":{"data":["wordpress","wordpress$PRODUCT$wordpress"],"providers":["enrichment"]},"weaknesses":{"data":["CWE-862"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2025-12-31T15:39:13.222000+00:00","description":"Missing Authorization vulnerability in Quadlayers AI Copilot allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects AI Copilot: from n/a through 1.4.7.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"yes","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"WordPress AI Copilot plugin <= 1.4.7 - Broken Access Control vulnerability","updated":"2025-12-31T16:51:06.690000+00:00","vendors":[],"vulnrichment_repo_path":"2025/62xxx/CVE-2025-62116.json","weaknesses":[]}}