CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-24580: WordPress 12 Step Meeting List plugin <= 3.16.5 - Arbitrary Content Deletion vulnerability
6.5
CVSS
Description
Missing Authorization vulnerability in Code for Recovery 12 Step Meeting List allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects 12 Step Meeting List: from n/a through 3.16.5.
Classification
CVE ID: CVE-2025-24580
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
Affected Products
Vendor: Code for Recovery
Product: 12 Step Meeting List
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.72% (scored less or equal to compared to others)
EPSS Date: 2025-02-21 (when was this score calculated)