CVE-2025-22277

EUVD-2025-9113 · Published Apr 1, 2025

Authentication Bypass Using an Alternate Path or Channel vulnerability in appsbd Vitepos vitepos-lite allows Authentication Abuse.This issue affects Vitepos: from n/a through <= 3.1.4.

Weaknesses

CWE-288

CVSS scores

v3.18.8CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Persistence Stealth Defense Impairment Credential Access Discovery

T1190Exploit Public-Facing Application T1083File and Directory Discovery T1211Exploitation for Stealth T1542.002Component Firmware T1556Modify Authentication Process

References

https://patchstack.com/database/Wordpress/Plugin/vitepos-lite/vulnerability/wordpress-vitepos-plugin-3-1-4-broken-authentication-vulnerability?_s_id=cve

Potentially impacted assets

See if this affects your attack surface