CVE-2025-68579

MediumCVSS 5.3

Published: 24/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 07/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.25%

16th percentile - higher than 16% of all known CVEs

Summary

The FV Simpler SEO plugin (up to version 1.9.6) has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. An attacker can leverage this to perform unauthorized actions.

Risk Assessment

The organization is exposed to unauthorized access to plugin functionality, potentially leading to content modification or privilege escalation.

Recommendation

Update the FV Simpler SEO plugin to the latest version if available, and review access control configuration.

Other vulnerabilities in FV Simpler SEO

CVE-2026-54868Medium
The FV Simpler SEO plugin for WordPress has a Stored XSS vulnerability. This affects all versions from n/a through 1.9.7.

Original NVD description (English source)

Missing Authorization vulnerability in FolioVision FV Simpler SEO fv-all-in-one-seo-pack allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects FV Simpler SEO: from n/a through <= 1.9.6.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS