TI-2025-06997 CVE-2025-7664 · GHSA-2vwh-54r8-6xwg
Missing authorization in loword AL Pack
Priority MEDIUM 40
The AL Pack plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the check_activate_permission() permission callback for the /wp-json/presslearn/v1/activate REST API endpoint in…