CVE-2025-69187

CVE-2025-69187 is a Missing Authorization vulnerability in the e-plugins Final User plugin, specifically affecting versions up to and including 1.2.5. This flaw allows attackers to exploit incorrectly configured access control security levels. With a CVSS score of 7.3 (HIGH), it presents a low-complexity attack vector that can be exploited remotely without authentication, potentially leading to low impacts on confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code (Metasploit, Nuclei, ExploitDB), the vulnerability has garnered significant community discussion, indicating awareness among security researchers.