CVE-2025-66532

MEDIO 4.3CVE-2025-66532 · Published 09/12/2025 · updated 23/10/2026

En resumen

CVE-2025-66532 es una vulnerabilidad MEDIO (CVSS 4.3) que afecta a powerlift (qodeinteractive).
Probabilidad de explotación en los próximos 30 días (EPSS): 0.28%, mayor que el 21.0% de las vulnerabilidades.
Solución: actualizar a 3.2.1 o posterior.

Package	Affected versions	Patched versions
powerlift qodeinteractive	`< 3.2.1`	`3.2.1`

Description

Missing Authorization vulnerability in Mikado-Themes Powerlift powerlift allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Powerlift: from n/a through < 3.2.1.

References

patchstack.com/database/Wordpress/Theme/powerlift/vulnerability/wordpress-powerlift-theme-3-2-1-broken-access-control-vulnerability · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free