CVE-2025-60143

MediumCVSS 4.3

Published: 26/09/2025(UTC)Updated: 19/10/2026(UTC)Translated: 19/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.24%

14th percentile - higher than 14% of all known CVEs

Summary

Missing Authorization vulnerability in the Netgsm WordPress plugin (versions up to and including 2.9.69) allows exploiting incorrectly configured access control security levels.

Risk Assessment

An attacker may perform unauthorized actions within the application, potentially leading to data modification or privilege escalation. The risk affects WordPress sites with the Netgsm plugin version <= 2.9.69.

Recommendation

Update the Netgsm plugin to the latest version if available, or consider removing it. Review and correct access control configuration.

Other vulnerabilities in Netgsm

CVE-2026-95514Medium
The Netgsm plugin in versions up to and including 2.10.0 contains a Bypass vulnerability exploitable by an unauthenticated attacker. The flaw allows bypassing the plugin's control mechanisms.

Original NVD description (English source)

Missing Authorization vulnerability in netgsm Netgsm netgsm allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Netgsm: from n/a through <= 2.9.69.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS