Medium · 5.3 CVE-2025-30830 EUVD-2025-8367GHSA-39hm-72f3-v7g5

WordPress Cool Author Box plugin <= 2.9.9 - Broken Access Control vulnerability

Published Mar 27, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Hossni Mubarak Product: Cool Author Box

Description

Missing Authorization vulnerability in Hossni Mubarak Cool Author Box hm-cool-author-box-widget allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Cool Author Box: from n/a through <= 2.9.9.

Affected products

Vendor	Product	Affected	Fixed
Hossni Mubarak	Cool Author Box	≤ 2.9.9	—

References

https://patchstack.com/database/Wordpress/Plugin/hm-cool-author-box-widget/vulnerability/wordpress-cool-author-box-plugin-2-9-9-broken-access-control-vulnerability?_s_id=cve vdb-entry