Vulnerability in Benmoody Wp Headless Cms Framework
CVE-2025-11260
The WP Headless CMS Framework plugin for WordPress is vulnerable to protection mechanism bypass in all versions up to, and including, 1.15. This is due to the plugin only checking for the existence of the Authorization header in a request…
EPSS: 0.003 (21.0th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.
Affected products
- Benmoody Wp Headless Cms Framework — versions 0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2025-11260?
- CVE-2025-11260 is a medium-severity vulnerability in Benmoody Wp Headless Cms Framework, classified under Protection Mechanism Failure. CVSS score: 5.3/10. Published 2025-11-13.
- How severe is CVE-2025-11260?
- Medium severity. CVSS v3 base score is 5.3 out of 10.