PatchSiren

PatchSiren cyber security CVE debrief

CVE-2025-66076 dylan ngo CVE debrief

CVE-2025-66076 is a MEDIUM-severity vulnerability in Woostify Sites Library plugin versions <= 1.6.2. The vulnerability is described as Unauthenticated Broken Access Control.

Vendor
dylan ngo
Product
Woostify Sites Library
CVSS
MEDIUM 5.3
CISA KEV
Not listed in stored evidence
Original CVE published
2026-07-02
Original CVE updated
2026-10-06
Advisory published
2026-07-02
Advisory updated
2026-10-06

Who should care

Defenders responsible for WordPress installations with the Woostify Sites Library plugin should assess exposure and potential impact.

Why it matters

CVE-2025-66076 is a MEDIUM-severity vulnerability in Woostify Sites Library plugin versions <= 1.6.2. Defenders responsible for WordPress installations with the Woostify Sites Library plugin should assess exposure and potential impact.

  • Verify exposure and assess potential impact on affected systems
  • Consider updating to a patched version if available

Technical summary

The vulnerability is described as Unauthenticated Broken Access Control in Woostify Sites Library plugin versions <= 1.6.2.

Defensive priority

Defenders should prioritize verifying exposure and assessing potential impact.

Recommended defensive actions

  • Verify exposure by checking plugin versions and configurations
  • Assess potential impact on affected systems
  • Consider updating to a patched version if available

Evidence notes

The CVE record and NVD entry provide limited information about the vulnerability.

Sources and references

Verified primary and authoritative sources

  • CVE-2025-66076 CVE Program record

    Publisher, destination, and source semantics verified

    URL: https://www.cve.org/CVERecord?id=CVE-2025-66076

    CVE Program - Official CVE Program record with source-provided CVE metadata.

  • CVE-2025-66076 NVD vulnerability detail

    Publisher, destination, and source semantics verified

    URL: https://nvd.nist.gov/vuln/detail/CVE-2025-66076

    NIST National Vulnerability Database - Official NIST NVD detail page and source-specific vulnerability assessment.

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.