Skip to content
OpenAdvisories
Medium · 5.4 CVE-2025-39545 EUVD-2025-11329GHSA-9v7w-mq26-j739

WordPress REST API Authentication plugin <= 3.6.3 - Settings Change Vulnerability

Published Apr 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in miniOrange WordPress REST API Authentication wp-rest-api-authentication allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WordPress REST API Authentication: from n/a through <= 3.6.3.

Affected products

VendorProductAffectedFixed
miniOrange WordPress REST API Authentication ≤ 3.6.3 —

References