CVE-2025-5812

VG WORT METIS <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update

View on CVE.org
Published Jun 26, 2025 CVSS 3.1 · 4.3 Medium EPSS < 1% KEV · Not listed
Description
The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gutenberg_save_post() function in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update limited post settings.

Analysis

AI-generated

Technical impact

The VG WORT METIS plugin for WordPress lacks a capability check in its gutenberg_save_post() function, allowing authenticated users with Subscriber-level privileges or higher to update limited post settings when saving via the Gutenberg editor. This results in unauthorized data modification, potentially altering post configuration without appropriate authorization. The weakness is an authorization flaw (CWE-862). The impact is confined to post settings, but it enables attackers to change content behavior or presentation without gaining higher-level access.

Affected Systems

Any WordPress installation that uses the VG WORT METIS plugin with version 2.0.0 or earlier is affected. Versions before 2.0.0 are confirmed vulnerable; newer releases contain a patch that removes this issue.

Risk and Exploitability

The CVSS score of 4.3 indicates low severity, and the EPSS score of less than 1% suggests a very low likelihood of exploitation. The vulnerability is not listed in CISA KEV. However, because the flaw requires only an authenticated Subscriber or higher user, any site with such accounts can potentially exploit the vulnerability. The risk remains low to medium due to the limited scope of the damage, but administrators should address it promptly.

Remediation

No solution or workaround provided in the CVE record.

OpenCVE Recommended Actions

  • Upgrade the VG WORT METIS plugin to a version newer than 2.0.0 to eliminate the missing capability check.
  • If a newer version is not immediately available, manually add a capability check in the gutenberg_save_post() function (for example, verify that the current user can 'edit_posts') before allowing post settings to be updated.
  • Review and adjust user role capabilities so that Subscriber accounts cannot use the Gutenberg editor or modify post settings unless explicitly permitted.

Generated by OpenCVE AI on April 20, 2026 at 20:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-19385 The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gutenberg_save_post() function in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update limited post settings.
History
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description The VG WORT METIS plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the gutenberg_save_post() function in all versions up to, and including, 2.0.0. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update limited post settings.
Title VG WORT METIS <= 2.0.0 - Missing Authorization to Authenticated (Subscriber+) Limited Settings Update
Weaknesses CWE-862
References
Metrics cvssV3_1

{'score': 4.3, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N'}
Weaknesses

Sources

Status
PUBLISHED
Assigner
Wordfence
Published
Updated
Apr 8, 2026, 5:18 PM
Reserved
Jun 6, 2025, 3:59 PM

View source JSON

Updated
Jun 27, 2025, 2:41 PM

JSON

Status
Deferred
Published
Jun 26, 2025, 2:15 AM
Modified
Jun 17, 2026, 9:48 AM

View source JSON

No data.

Updated
Apr 20, 2026, 8:30 PM

JSON