{"resultsPerPage":1,"startIndex":0,"totalResults":1,"format":"NVD_CVE","version":"2.0","timestamp":"2026-08-05T11:11:37.242","vulnerabilities":[{"cve":{"id":"CVE-2025-28985","sourceIdentifier":"audit@patchstack.com","published":"2025-06-06T13:15:29.287","lastModified":"2026-06-17T09:04:59.990","vulnStatus":"Deferred","cveTags":[],"descriptions":[{"lang":"en","value":"Missing Authorization vulnerability in Elastic Email Elastic Email Subscribe Form elastic-email-subscribe-form allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Elastic Email Subscribe Form: from n/a through <= 1.2.2."},{"lang":"es","value":"Vulnerabilidad de falta de autorización en Elastic Email Elastic Email Subscribe Form permite explotar niveles de seguridad de control de acceso configurados incorrectamente. Este problema afecta al formulario de suscripción de Elastic Email desde n/d hasta la versión 1.2.2."}],"affected":[{"source":"audit@patchstack.com","affectedData":[{"vendor":"Elastic Email","product":"Elastic Email Subscribe Form","defaultStatus":"unaffected","collectionURL":"https://wordpress.org/plugins","packageName":"elastic-email-subscribe-form","versions":[{"version":"0","lessThanOrEqual":"1.2.2","versionType":"custom","status":"affected"}]}]}],"metrics":{"cvssMetricV31":[{"source":"audit@patchstack.com","type":"Secondary","cvssData":{"version":"3.1","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L","baseScore":5.4,"baseSeverity":"MEDIUM","attackVector":"NETWORK","attackComplexity":"LOW","privilegesRequired":"LOW","userInteraction":"NONE","scope":"UNCHANGED","confidentialityImpact":"NONE","integrityImpact":"LOW","availabilityImpact":"LOW"},"exploitabilityScore":2.8,"impactScore":2.5}],"ssvcV203":[{"source":"134c704f-9b21-4f2e-91b3-4a467353bcc0","ssvcData":{"timestamp":"2025-06-06T16:10:29.419896Z","id":"CVE-2025-28985","options":[{"exploitation":"none"},{"automatable":"no"},{"technicalImpact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}]},"weaknesses":[{"source":"audit@patchstack.com","type":"Secondary","description":[{"lang":"en","value":"CWE-862"}]}],"references":[{"url":"https://patchstack.com/database/Wordpress/Plugin/elastic-email-subscribe-form/vulnerability/wordpress-elastic-email-subscribe-form-1-2-2-broken-access-control-vulnerability?_s_id=cve","source":"audit@patchstack.com"}]}}]}