June 12, 2026

CVE Watchtower


← Back to CVE List

CVE-2025-32210NVD

Vulnerability Summary

Missing Authorization vulnerability in CreativeMindsSolutions CM Registration and Invitation Codes cm-invitation-codes allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects CM Registration and Invitation Codes: from n/a through <= 2.5.6.
Severity Level
MEDIUM(6.5)
Published Date
Apr 10, 2025
Last Modified
Apr 23, 2026
Exploitation Status
????
EPSS Score (30-Day)
0.13%Probability
Root Weakness (CWE)
CWE-862: Missing Authorization ↗
The software does not perform an authorization check when an actor attempts to access a resource or perform an action.
CVSS v3.1 Base Metrics
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredLow
User InteractionNone
ScopeUnchanged
ConfidentialityNone
IntegrityHigh
AvailabilityNone

External References