{"cve":"CVE-2025-62751","enrichment":{"created":"2026-01-05T10:15:37.728091+00:00","updated":"2026-04-29T18:00:13.922851+00:00","vendors":["wordpress","wordpress$PRODUCT$wordpress"]},"epss":{"score":0.00206},"mitre":{"cpes":[],"created":"2025-12-31T16:02:50.502000+00:00","description":"Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through <= 1.0.24.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"cvssV4_0":{}},"mitre_repo_path":"cves/2025/62xxx/CVE-2025-62751.json","references":["https://patchstack.com/database/Wordpress/Theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"],"title":"WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability","updated":"2026-04-28T16:14:03.855000+00:00","vendors":[],"weaknesses":["CWE-862"]},"nvd":{"cpes":["cpe:2.3:a:extendthemes:vireo:*:*:*:*:*:wordpress:*:*"],"created":"2025-12-31T16:15:47.040000+00:00","description":"Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through <= 1.0.24.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"cvssV4_0":{}},"nvd_repo_path":"2025/CVE-2025-62751.json","references":["https://patchstack.com/database/Wordpress/Theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"],"title":null,"updated":"2026-09-23T17:10:00.210000+00:00","vendors":["extendthemes","extendthemes$PRODUCT$vireo"],"weaknesses":["CWE-862"]},"opencve":{"changes":[{"created":"2025-12-31T16:15:00+00:00","data":[{"details":{"new":"Missing Authorization vulnerability in Extend Themes Vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through 1.0.24.","old":null},"type":"description"},{"details":{"new":"WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability","old":null},"type":"title"},{"details":{"added":["CWE-862"],"removed":[]},"type":"weaknesses"},{"details":{"added":["https://vdp.patchstack.com/database/wordpress/theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"],"removed":[]},"type":"references"},{"details":{"added":{"cvssV3_1":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"546c5119-a849-4747-8fba-4eb0503af426"},{"created":"2025-12-31T21:15:00+00:00","data":[{"details":{"added":{"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"removed":{},"updated":{}},"type":"metrics"}],"id":"d758e0a4-d96e-4168-a481-9f67e3cae4d7"},{"created":"2026-01-05T10:45:00+00:00","data":[{"details":["wordpress","wordpress$PRODUCT$wordpress"],"type":"first_time"},{"details":{"added":["wordpress","wordpress$PRODUCT$wordpress"],"removed":[]},"type":"vendors"}],"id":"02cf253c-1068-4773-9d89-867fdca559f0"},{"created":"2026-01-12T14:15:00+00:00","data":[{"details":["extendthemes","extendthemes$PRODUCT$vireo"],"type":"first_time"},{"details":{"added":["cpe:2.3:a:extendthemes:vireo:*:*:*:*:*:wordpress:*:*"],"removed":[]},"type":"cpes"},{"details":{"added":["extendthemes","extendthemes$PRODUCT$vireo"],"removed":[]},"type":"vendors"}],"id":"f4874ec2-9240-4cab-a180-cfa32f2eeea5"},{"created":"2026-01-20T14:45:00+00:00","data":[{"details":{"added":["https://patchstack.com/database/wordpress/theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"],"removed":[]},"type":"references"}],"id":"6591c189-d357-4138-9b47-582014961ee5"},{"created":"2026-01-20T15:30:00+00:00","data":[{"details":{"added":[],"removed":["https://vdp.patchstack.com/database/wordpress/theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"]},"type":"references"}],"id":"c27bd76b-e0e5-4ebb-a533-0ad946d14ebf"},{"created":"2026-04-01T23:45:00+00:00","data":[{"details":{"new":"Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through <= 1.0.24.","old":"Missing Authorization vulnerability in Extend Themes Vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through 1.0.24."},"type":"description"},{"details":{"added":["https://patchstack.com/database/Wordpress/Theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"],"removed":["https://patchstack.com/database/wordpress/theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"]},"type":"references"},{"details":{"added":{},"removed":{},"updated":{"cvssV3_1":{"new":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"},"old":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}}}},"type":"metrics"}],"id":"4b36859d-9592-4e03-85b1-3a127dac5fa2"},{"created":"2026-04-23T15:00:00+00:00","data":[{"details":{"added":{},"removed":{},"updated":{"cvssV3_1":{"new":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"old":{"score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}}}},"type":"metrics"}],"id":"52eff5f8-5c2e-4044-a5ec-a083408cf790"}],"cpes":{"data":["cpe:2.3:a:extendthemes:vireo:*:*:*:*:*:wordpress:*:*"],"providers":["nvd"]},"created":{"data":"2025-12-31T16:02:50.502000+00:00","provider":"mitre"},"description":{"data":"Missing Authorization vulnerability in extendthemes Vireo vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through <= 1.0.24.","provider":"mitre"},"metrics":{"cvssV2_0":{"data":{},"provider":null},"cvssV3_0":{"data":{},"provider":null},"cvssV3_1":{"data":{"score":4.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"},"provider":"mitre"},"cvssV4_0":{"data":{},"provider":null},"epss":{"data":{"score":0.00206},"provider":"first"},"kev":{"data":{},"provider":null},"ssvc":{"data":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"},"provider":"vulnrichment"},"threat_severity":{"data":null,"provider":null}},"references":{"data":["https://patchstack.com/database/Wordpress/Theme/vireo/vulnerability/wordpress-vireo-theme-1-0-24-broken-access-control-vulnerability?_s_id=cve"],"providers":["mitre","nvd"]},"title":{"data":"WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability","provider":"mitre"},"updated":{"data":"2026-04-23T15:34:40.407000+00:00","provider":"nvd"},"vendors":{"data":["extendthemes","extendthemes$PRODUCT$vireo","wordpress","wordpress$PRODUCT$wordpress"],"providers":["nvd","enrichment"]},"weaknesses":{"data":["CWE-862"],"providers":["mitre","nvd"]}},"vulnrichment":{"cpes":[],"created":"2025-12-31T16:02:50.502000+00:00","description":"Missing Authorization vulnerability in Extend Themes Vireo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Vireo: from n/a through 1.0.24.","metrics":{"cvssV2_0":{},"cvssV3_0":{},"cvssV3_1":{},"cvssV4_0":{},"kev":{},"ssvc":{"options":{"Automatable":"no","Exploitation":"none","Technical Impact":"partial"},"version":"2.0.3"}},"references":[],"title":"WordPress Vireo theme <= 1.0.24 - Broken Access Control vulnerability","updated":"2025-12-31T20:47:54.205000+00:00","vendors":[],"vulnrichment_repo_path":"2025/62xxx/CVE-2025-62751.json","weaknesses":[]}}