CVE-2025-68534General

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Missing Authorization vulnerability in add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PDF for WPForms: from n/a through <= 6.3.0.

Back to dashboard

0.0/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/pdf-for-wpforms/vulnerability/wordpress-pdf-for-wpforms-plugin-6-3-0-broken-access-control-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Threat summary

1 mentions across 1 observed day

What's happening

Technical details provided in 1 signal
General: 1 classified signal
1 total mentions across 1 day

Deep dive

Activity timeline1 mentions / 1d

Signal classification1 categories

General

1100.0%

Referenced assets2 URLs

By indicator

Full discourse1 post

CVE@CVEnew229d
General
CVE-2025-68534 Missing Authorization vulnerability in http://add-ons.org PDF for WPForms pdf-for-wpforms allows Exploiting Incorrectly Configured Access Control Security Levels.This issue … https://www.cve.org/CVERecord?id=CVE-2025-68534
Post summary
The text references CVE-2025-68534, noting a missing authorization flaw in the PDF for WPForms that allows exploitation via incorrectly configured access control, but provides no PoC, exploit, patch, or evidence of active exploitation.
00000127
56.5K followersView on X

Explore more

Back to dashboard