CVE-2025-24762: WordPress TicketBAI Facturas para WooCommerce <= 3.19 - Broken Access Control Vulnerability

5.4 CVSS

Description

Missing Authorization vulnerability in facturaone TicketBAI Facturas para WooCommerce allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects TicketBAI Facturas para WooCommerce: from n/a through 3.19.

Classification

CVE ID: CVE-2025-24762

CVSS Base Severity: MEDIUM

CVSS Base Score: 5.4

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

Problem Types

CWE-862 Missing Authorization

Affected Products

Vendor: facturaone

Product: TicketBAI Facturas para WooCommerce

References

https://nvd.nist.gov/vuln/detail/CVE-2025-24762
https://patchstack.com/database/wordpress/plugin/wp-ticketbai/vulnerability/wordpress-ticketbai-facturas-para-woocommerce-3-19-broken-access-control-vulnerability?_s_id=cve

Timeline