CyberAlerts is shutting down on June 30th, 2025. Thank you for your support!
CVE-2025-24642: WordPress Setup Default Featured Image plugin <= 1.2 - Broken Access Control vulnerability
6.5
CVSS
Description
Missing Authorization vulnerability in theme funda Setup Default Featured Image allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Setup Default Featured Image: from n/a through 1.2.
Classification
CVE ID: CVE-2025-24642
CVSS Base Severity: MEDIUM
CVSS Base Score: 6.5
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L
Affected Products
Vendor: theme funda
Product: Setup Default Featured Image
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 11.83% (scored less or equal to compared to others)
EPSS Date: 2025-03-04 (when was this score calculated)