BaseFortify

Publication date: 2026-01-22

Last updated on: 2026-04-27

Assigner: Patchstack

Description

Missing Authorization vulnerability in Codeless Slider Templates slider-templates allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Slider Templates: from n/a through <= 1.0.3.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-22

Last Modified

2026-04-27

Generated

2026-07-06

AI Q&A

2026-01-22

EPSS Evaluated

2026-07-05

NVD

CVE-2025-68009

Affected Vendors & Products

Currently, no data is known.

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2025-68009 is a Broken Access Control vulnerability in the WordPress Slider Templates Plugin (versions up to 1.0.3). It occurs due to missing authorization, authentication, or nonce token checks in certain plugin functions, allowing unauthenticated users to perform actions that should require higher privileges. [1]

Impact Analysis

This vulnerability can allow unauthorized users to access and perform privileged actions within the Slider Templates plugin, potentially compromising the security and integrity of your WordPress site. Since it is a medium severity issue with a CVSS score of 6.5, exploitation could lead to unauthorized changes or access to sensitive functionality. [1]

Mitigation Strategies

Since no official fix or patched version is currently available for CVE-2025-68009, it is recommended to apply the mitigation rule released by Patchstack to block attacks targeting this vulnerability. Users should implement this mitigation measure immediately to protect their websites from exploitation. [1]

Hi! I’m here to help you understand CVE-2025-68009. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70