{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-06-27T01:48:14.659","vulnerabilities":[{"cve":{"id":"CVE-2025-23958","sourceIdentifier":"audit@patchstack.com","published":"2025-04-17T16:15:31.170","lastModified":"2026-06-17T08:57:47.767","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Missing Authorization vulnerability in FADI MED Editor Wysiwyg Background Color editor-wysiwyg-background-color allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Editor Wysiwyg Background Color: from n/a through <= 1.0."},{"lang":"es","value":"La vulnerabilidad de falta de autorización en FADI MED Editor Wysiwyg Background Color permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al color de fondo Wysiwyg del editor desde n/d hasta la versión 1.0."}],"affected":[{"source":"audit@patchstack.com","affectedData":[{"vendor":"FADI MED","product":"Editor Wysiwyg Background Color","defaultStatus":"unaffected","collectionURL":"https://wordpress.org/plugins","packageName":"editor-wysiwyg-background-color","versions":[{"version":"0","lessThanOrEqual":"1.0","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"audit@patchstack.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L","baseScore":6.5,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"NONE","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":3.9,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-04-17T17:41:55.922712Z","id":"CVE-2025-23958","options":[{"exploitation":"none"},{"automatable":"yes"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/editor-wysiwyg-background-color/vulnerability/wordpress-editor-wysiwyg-background-color-plugin-1-0-broken-access-control-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}}]}