CVE-2025-25110 Information

Description

Missing Authorization vulnerability in Metagauss Event Kikfyre allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Event Kikfyre: from n/a through 2.1.8.

Reference

https://patchstack.com/database/wordpress/plugin/kikfyre-events-calendar-tickets/vulnerability/wordpress-event-kikfyre-plugin-2-1-8-broken-access-control-vulnerability?_s_id=cve