ExploitPublished
WordPress Plugin 5.2.0 · Broken Access Control
Source Exploit-DB RSS Feed
0
Mentioned vulnerabilities
Severity
MediumRated by Threat Radar
Data as of 28 Apr 2026, 06:13 UTC
What to do
AI-suggested
Until a patch is available, site administrators should consider disabling or restricting the affected plugin's email sharing functionality or implementing additional access controls to prevent unauthenticated abuse. Monitoring for unusual email activity related to the plugin is also advisable.
Description
WordPress Plugin 5.2.0 - Broken Access Control
Indicators of compromise
Exploit source code
# Exploit Title: WordPress Plugin 5.2.0 - Broken Access Control
# Date: 2025-09-20
# Exploit Author: Zeeshan Haider
# Vendor Homepage: https://wordpress.org/plugins/
# Software Link: https://wordpress.org/plugins/highlight-and-share/
# Version: <= 5.2.0 (REQUIRED)
# Tested on: WordPress 6.x, Kali Linux
# CVE: CVE-2025-67586
==> Description
A broken access control vulnerability exists in a WordPress plugin developed by DLX Plugins.
The plugin exposes an unauthenticated AJAX action that allows at…References
Community reviews
Loading reviews…