{"data":{"id":"4282709f-4247-4684-a807-243303c1476b","title":"CVE-2025-62116: Missing Authorization vulnerability in Quadlayers AI Copilot allows Exploiting Incorrectly Configured Access Control…","summary":"CVE-2025-62116 is a Missing Authorization vulnerability (CWE-862) in Quadlayers AI Copilot, a WordPress plugin, affecting versions from n/a through 1.4.7. The flaw allows exploitation of incorrectly configured access control security levels. Patchstack reported the issue, and NIST has not yet provided an NVD assessment.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2025-62116","publishedAt":"2025-12-31T16:15:44.867Z","cveId":"CVE-2025-62116","cweIds":["CWE-862"],"cvssScore":"5.3","cvssSeverity":"medium","severity":"medium","attackType":[],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["AI Copilot (Quadlayers WordPress plugin)"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":"AI Copilot missing authorization allows access control bypass","headlinePromptVersion":"h1","cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":"unknown","epssScore":0.00209,"epssCheckedAt":"2026-11-04T06:10:14.410Z","kevDateAdded":null,"advisoryAliases":["GHSA-w5jv-29g5-4cmm"],"affectedPackagesSource":null,"affectedPackagesCheckedAt":"2026-11-04T00:12:50.190Z","patchAvailable":null,"disclosureDate":null,"fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":["CAPEC-122"],"crossRefCount":0,"attackSophistication":"trivial","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}