VULNERABILITY INTELLIGENCE

CVE-2025-54049

CVSS score9.9 CRITICAL

EPSS probability0.41%

CISA KEVNot currently listed

Published2025-08-20

Last modified2026-06-17

Description

Incorrect Privilege Assignment vulnerability in miniOrange Custom API for WP custom-api-for-wp allows Privilege Escalation.This issue affects Custom API for WP: from n/a through <= 4.2.2.