CVE-2025-6003
Published: Jun 12, 2025
Modified: Apr 8, 2026
CVSS v3.1
5.3
Description
The WordPress Single Sign-On (SSO) plugin for WordPress is vulnerable to unauthorized access due to a misconfigured capability check on a function in all versions up to, and including, the *.5.3 versions of the plugin. This makes it possible for unauthenticated attackers to extract sensitive data including site content that has been restricted to certain users and/or roles.
| Vendor | Product | Versions |
|---|---|---|
cyberlord92 | WordPress Single Sign-On (SSO) - Single Site Standard | affected 0 - <= 18.5.3 |
cyberlord92 | WordPress Single Sign-On (SSO) - Single Site Premium | affected 0 - <= 28.5.3 |
cyberlord92 | WordPress Single Sign-On (SSO) - Multisite Premium | affected 0 - <= 30.5.3 |
cyberlord92 | WordPress Single Sign-On (SSO) - Single Site Enterprise | affected 0 - <= 38.5.3 |
cyberlord92 | WordPress Single Sign-On (SSO) - Multisite Enterprise | affected 0 - <= 40.5.3 |
cyberlord92 | WordPress Single Sign-On (SSO) - Single Site All-Inclusive | affected 0 - <= 48.5.3 |
cyberlord92 | WordPress Single Sign-On (SSO) - Multisite All-Inclusive | affected 0 - <= 50.5.3 |
Weaknesses (CWE)
CVSS v3.1 Details
CVSS v3.1 Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Security Training
Train your team to recognize and prevent security threats with our comprehensive security awareness program.
Start TrainingVulnerability Scanning
Discover vulnerabilities in your applications and infrastructure before attackers do.
Scan Now