CVE-2025-68585: 
WordPress vulnerability analysis and mitigation

CVE-2025-68585 is a Missing Authorization vulnerability in the WP Document Revisions WordPress plugin developed by Ben Balter. It allows attackers with high-privileged access to exploit incorrectly configured access control security levels, potentially performing unauthorized actions on documents. The vulnerability affects all versions of the plugin up to and including 3.7.2. It was published on December 24, 2025, and carries a CVSS v3.1 base score of 2.7 (Low) (Feedly, Patchstack).

The vulnerability is classified as CWE-862 (Missing Authorization), meaning the plugin fails to properly verify whether an authenticated user has the appropriate permissions before allowing certain actions related to document management (Feedly). The attack vector is network-based, requires no user interaction, and requires high privileges (e.g., an administrator or editor-level account), with low attack complexity. The flaw stems from incorrectly configured access control security levels within the plugin's document revision handling logic, enabling privilege misuse rather than privilege escalation (Patchstack).

Successful exploitation results in a low integrity impact with no confidentiality or availability impact, as reflected in the CVSS score. An attacker with high-privileged access could perform unauthorized modifications to documents managed by the plugin, bypassing intended access control restrictions. The scope is limited to the affected WordPress installation and does not allow lateral movement or significant data exposure (Feedly).

There is no public proof-of-concept exploit available, and no evidence of active in-the-wild exploitation has been reported as of the time of disclosure (Feedly). The vulnerability is not listed in the CISA Known Exploited Vulnerabilities (KEV) catalog. The EPSS score is approximately 0.039%, indicating a very low probability of exploitation in the near term (Feedly). No threat actor attribution has been identified.

The primary remediation is to update the WP Document Revisions plugin to a version newer than 3.7.2, which addresses the missing authorization checks (Feedly, Patchstack). Site administrators should also conduct an access control audit, review document permissions and access logs, and ensure that only trusted users hold high-privileged roles on the WordPress installation. No configuration-based workaround has been publicly documented.

The vulnerability received brief coverage on social media platforms including Mastodon and Bluesky via TheHackerWire shortly after disclosure, and was included in a CISA weekly vulnerability summary for the week of December 22, 2025 (Red Packet Security). No significant vendor statements or notable researcher commentary beyond the Patchstack disclosure have been identified.