Skip to content
OpenAdvisories

Vendor

sorich87

1 known vulnerabilities.

Products

Browse As 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-5190

    Browse As <= 0.2 - Authenticated (Subscriber+) Authentication Bypass via Cookie

    The Browse As plugin for WordPress is vulnerable to authentication bypass in versions up to, and including, 0.2. This is due to incorrect authentication checking in the 'IS_BA_Browse_As::notice' function with the 'is_ba_original_user_COOKIEHASH' cookie value.…

    sorich87 Browse As Web / CMS