CVE-2025-49431
BaseFortify
Publication date: 2025-07-04
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-49431 is a Missing Authorization vulnerability in the WordPress MF Plus WPML plugin (up to version 1.1) that allows unauthorized and unauthenticated attackers to change plugin settings. This happens because of incorrectly configured access control, classified as a 'Settings Change' issue under OWASP Top 10 category A1: Broken Access Control. There is no official fix yet, but a virtual patch is available to mitigate the risk. [1]
How can this vulnerability impact me? :
This vulnerability can allow attackers to change the plugin settings without authorization, potentially compromising the site configuration. This could lead to altered site behavior, security weaknesses, or further exploitation. Since the vulnerability allows unauthorized changes, it poses a moderate risk to the integrity and availability of the affected site. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection involves monitoring for unauthorized changes to the MF Plus WPML plugin settings, as the vulnerability allows unauthenticated attackers to change plugin configurations. Since no official fix is available, using Patchstack's virtual patching system can help detect and block exploitation attempts. Specific commands are not provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include applying Patchstack's virtual patch (vPatch) to block attacks exploiting this vulnerability until an official fix is released. Users should promptly implement these mitigations and seek professional incident response if a compromise is suspected. [1]