CVE-2025-23961

Summary

CVE-2025-23961 is a Missing Authorization vulnerability affecting the WP Tasker plugin for WordPress, specifically its Graphs & Charts feature. The flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially gaining unauthorized access to sensitive information or functionality. This issue affects WP Tasker Graphs & Charts versions from n/a through 2.0.8. WordPress users are advised to upgrade to the latest version to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.