CVE-2025-48139 PUBLISHED

WordPress StyleAI plugin <= 1.0.4 - Broken Access Control Vulnerability

Assigner: Patchstack
Reserved: 15.05.2025 Published: 09.06.2025 Updated: 01.04.2026

Missing Authorization vulnerability in relentlo StyleAI relentlosoftware allows Accessing Functionality Not Properly Constrained by ACLs.This issue affects StyleAI: from n/a through <= 1.0.4.

Product Status

Vendor	relentlo
Product	StyleAI
Versions	Default: unaffected affected from 0 to 1.0.4 (incl.)

Credits

ch4r0n | Patchstack Bug Bounty Program finder

References

https://patchstack.com/database/Wordpress/Plugin/relentlosoftware/vulnerability/wordpress-styleai-1-0-4-broken-access-control-vulnerability?_s_id=cve

Problem Types

Missing Authorization CWE

Impacts

Accessing Functionality Not Properly Constrained by ACLs