Skip to content
OpenAdvisories
Low · 3.8 CVE-2025-58012 EUVD-2025-30605GHSA-pww7-g5g9-2865

WordPress Content Mask plugin <= 1.8.5.3 - Insecure Direct Object References (IDOR) vulnerability

Published Sep 22, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Authorization Bypass Through User-Controlled Key vulnerability in Alex Content Mask content-mask allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Content Mask: from n/a through <= 1.8.5.3.

Affected products

VendorProductAffectedFixed
Alex Content Mask ≤ 1.8.5.3 —

References