CVE-2025-6786 DocCheck Login <= 1.1.5 - Unauthorized Post Access
Unauthenticated attackers can read password-protected posts in the DocCheck Login WordPress plugin due to improper access control implementation.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-6786?
CVE-2025-6786 is a medium-severity missing authorization vulnerability in antwerpes DocCheck Login, published on 4 Jul 2025. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login on a password protected post after the page has loaded. This makes it possible for unauthenticated attackers to read posts they should not have access to.
Weakness: CWE-284
Which versions are affected by CVE-2025-6786?
How do I fix CVE-2025-6786?
No fix has been published for CVE-2025-6786 yet. Limit exposure of the affected software until one is available.
Upgrade, and check permissions on every request on the server, not only in the interface. More about Missing authorization.
Is CVE-2025-6786 being exploited?
There is no known exploitation of CVE-2025-6786 in the wild and no public exploit code.
Sources
Also known as GHSA-73g7-fx7p-h5v2.