CVE-2026-25437Disclosure

LOWCVSS 6.5 · MEDIUM

Exploit discussion active in current signal (1 latest mentions)

Immediate actions

Hunt for exploitation attempts and persistence artifacts
Increase monitoring for publicly documented tradecraft
Track advisory updates for patch or workaround availability

Recommended action window: High priority (within 72h)

NVD description

Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO: from n/a through <= 2.0.14.

Back to dashboard

1.5/ 10 priority

Sources & remediation

Other references

https://patchstack.com/database/Wordpress/Plugin/gzseo/vulnerability/wordpress-gzseo-plugin-2-0-11-broken-access-control-vulnerability?_s_id=cve

Weakness type (CWE)

CWE-862

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

STABLE

Threat summary

Public PoC is present in monitored signal
3 mentions across 2 observed days
Momentum state: stable

What's happening

PoC mentioned or linked in 1 signal
Technical details provided in 2 signals
Disclosure: 1 classified signal
General: 1 classified signal
Peaked 1d ago at 2 mentions (2026-03-29); latest day: 1
3 total mentions across 2 days

Deep dive

Activity timeline3 mentions / 2d

Signal classification3 categories

Disclosure

133.3%

General

133.3%

PoC

133.3%

Referenced assets3 URLs

By indicator

Classification over time

Date	Total	Labels

2026-03-29	2	Disclosure1General1
2026-04-09	1	PoC1

Full discourse3 posts

CVE@CVEnew195d
General
CVE-2026-25437 Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO… https://www.cve.org/CVERecord?id=CVE-2026-25437
Post summary
The post identifies CVE-2026-25437 as a missing authorization flaw in GZSEO, providing only a high‑level description and a link to the CVE record without additional technical or exploitation details.
00010191
56.9K followersView on X
Atomic Edge@atomicedgeWAF184d
PoC
https://atomicedge.io/cve-proof/cve-2026-25437-gzseo-version-2-0-14-medium-vulnerability-proof-of-concept CVE-2026-25437 #WordPress plugin #vulnerability gzseo #cybersecurity #wordpressfirewall #wordpresssecurity #hacking #wpsecurity #atomicedge
Post summary
A link to a proof‑of‑concept for CVE‑2026‑25437 regarding the gzseo WordPress plugin is shared, indicating this Medium severity vulnerability has been demonstrated, but no active exploitation, patch, or technical details are provided.
0000055
6 followersView on X
Infoflowcloud@infoflowcloud195d
Disclosure
🚨*CVE* CVE-2026-25437 Missing Authorization vulnerability in سید محمدامین هاشمی GZSEO gzseo allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects GZSEO… https://www.cve.org/CVERecord?id=CVE-2026-25437 ----- Traducción: CVE-2026-25437 vul… http://infoflow.cloud`
Post summary
The post reports a newly disclosed CVE‑2026‑25437 as a missing‑authorization flaw in GZSEO, with minimal additional tactical details.
0000024
65 followersView on X

Explore more

Back to dashboard