Medium · 5.4 CVE-2025-31555 EUVD-2025-8812GHSA-hv45-666x-7h7j

WordPress ContentMX Content Publisher plugin <= 1.0.6 - Broken Access Control vulnerability

Published Mar 31, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: contentmx Product: ContentMX Content Publisher

Description

Missing Authorization vulnerability in ContentMX ContentMX Content Publisher contentmx-content-publisher allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects ContentMX Content Publisher: from n/a through <= 1.0.6.

Affected products

Vendor	Product	Affected	Fixed
ContentMX	ContentMX Content Publisher	≤ 1.0.6	—

References

https://patchstack.com/database/Wordpress/Plugin/contentmx-content-publisher/vulnerability/wordpress-contentmx-content-publisher-plugin-1-0-6-broken-access-control-vulnerability?_s_id=cve vdb-entry