Medium · 5.3 CVE-2025-48155 EUVD-2025-21648GHSA-gh24-v4x6-g4qj

WordPress Residential Address Detection plugin <= 2.5.9 - Broken Access Control Vulnerability

Published Jul 16, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Eniture technology Product: Residential Address Detection

Description

Missing Authorization vulnerability in enituretechnology Residential Address Detection residential-address-detection allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects Residential Address Detection: from n/a through <= 2.5.9.

Affected products

Vendor	Product	Affected	Fixed
enituretechnology	Residential Address Detection	≤ 2.5.9	—

References

https://patchstack.com/database/Wordpress/Plugin/residential-address-detection/vulnerability/wordpress-residential-address-detection-plugin-2-5-9-broken-access-control-vulnerability?_s_id=cve vdb-entry