CVE-2025-4202Disclosure

LOWCVSS 4.3 · MEDIUM

Signal is active with 2 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'cf_add_comment' function in all versions up to, and including, 5.2. This makes it possible for authenticated attackers, with Subscriber-level access and above, to add comments to arbitrary collaborations.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

STABLE

Threat summary

3 mentions across 2 observed days
Momentum state: stable

What's happening

Technical details provided in 3 signals
Disclosure: 3 classified signals
Peaked at 2 mentions on most recent observed day (2026-05-17)
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification1 categories

Disclosure

3100.0%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-05-16	1	Disclosure1
2026-05-17	2	Disclosure2

Full discourse3 posts

Infoflowcloud@infoflowcloud144d
Disclosure
🚨*CVE* CVE-2025-4202 The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… https://www.cve.org/CVERecord?id=CVE-2025-4202 ----- Traducción: CVE-2025-4202 El … http://infoflow.cloud`
Post summary
The post announces CVE-2025-4202 affecting the Multicollab WordPress plugin, noting unauthorized data modification due to a missing capability. No PoC, exploit, active use, patch, or false positive is indicated.
000001.5K
78 followersView on X
CVE@CVEnew144d
Disclosure
CVE-2025-4202 The Multicollab: Content Team Collaboration and Editorial Workflow plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability c… https://www.cve.org/CVERecord?id=CVE-2025-4202
Post summary
The post announces CVE‑2025‑4202, noting unauthorized data modification caused by a missing capability in the WordPress Multicollab plugin, but provides no PoC, exploit code, patch, or evidence of active exploitation.
000001.6K
57.5K followersView on X
Vulmon Vulnerability Feed@VulmonFeeds145d
Disclosure
CVE-2025-4202 Unauthorized Data Modification in Multicollab WordPress Plugin Versions Up To 5.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-4202
Post summary
The entry reports a data‑modification vulnerability in the Multicollab WordPress plugin (versions ≤5.2), providing basic technical details without any PoC, exploit code, or patch information.
000001.4K
4.0K followersView on X

Explore more

Back to dashboard