CVE-2025-62960 - WordPress Construction Light theme <= 1.6.7 - broken access control vulnerability

CVE ID : CVE-2025-62960 Published : Dec. 18, 2025, 5:15 p.m. | 30 minutes ago Description : Missing Authorization vulnerability in Sparkle WP Construction Light allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Construction Light: from n/a through 1.6.7. Severity: 5.4 | MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...

Source: Telegram CVE Monitor