MEDIUM
WordPress Serial Codes Generator and Validator with WooCommerce Support plugin <= 2.8.2 - Broken Access Control vulnerability
Published Dec 31, 2025
5.4
MEDIUMCVSS 3.1
EPSS 0.20%
Description
Missing Authorization vulnerability in Vollstart Serial Codes Generator and Validator with WooCommerce Support serial-codes-generator-and-validator allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Serial Codes Generator and Validator with WooCommerce Support: from n/a through <= 2.8.2.
Affected products
- Vendor Vollstart Product Serial Codes Generator and Validator with WooCommerce Support Defaultunaffected
- Version -StatusaffectedConstraints<=2.8.2
- Version
Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).
| Vendor | Product | Default status | Versions | ||||||
|---|---|---|---|---|---|---|---|---|---|
| Vollstart | Serial Codes Generator and Validator with WooCommerce Support | unaffected |
|
No data.
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (1)
References (2)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-205947 Advisory
- https://patchstack.com/database/Wordpress/Plugin/serial-codes-generator-and-validator/vulnerability/wordpress-serial-codes-generator-and-validator-with-woocommerce-support-plugin-2-8-2-broken-access-control-vulnerability?_s_id=cve vdb-entry
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner Patchstack
Published Dec 31, 2025
Updated Apr 28, 2026
Reserved Oct 7, 2025
Link CVE-2025-62091
CISA Vulnrichment
Updated Jan 5, 2026
ENISA EUVD
EUVD-2025-205947 Assigner Patchstack
Published Dec 31, 2025
Updated Apr 28, 2026
Exploited since n/a
Link EUVD-2025-205947