CVE-2025-6786

Description

The DocCheck Login plugin for WordPress is vulnerable to unauthorized post access in all versions up to, and including, 1.1.5. This is due to plugin redirecting a user to login on a password protected post after the page has loaded. This makes it possible for unauthenticated attackers to read posts they should not have access to.

References

https://www.wordfence.com/threat-intel/vulnerabilities/id/0739b5ec-b1c4-4451-97c1-f8d5ed26a2d5?source=cve

https://wordpress.org/plugins/doccheck-login/

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS