cleantalk
Vulnerabilities and Security Researches

SALESmanago, CVE-2025-68571

CVE, Research URL

CVE-2025-68571

Home page URL

Security reports for SALESmanago

Application

SALESmanago

Published on
Dec 24, 2025
Research Description
Missing Authorization vulnerability in SALESmanago SALESmanago salesmanago allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects SALESmanago: from n/a through <= 3.9.0.
Affected versions
max 3.9.0.
Status
vulnerable
Previous vulnerability researches
Elegant Calendar Lite &#8211; WordPress Events Calendar Plugin (7baa0a5325c0f0e1989c8ab90d1aa436a0bb37fd) , Jun 06, 2024
New vulnerability
Pure WC Variation Swatches (CVE-2025-12820) , Jan 11, 2026
WP Scraper (CVE-2025-62088) , Jan 11, 2026
Chat Widget: Customer Support Button with SMS Call Button, Click to Chat Messenger Live Chat Support Chat Button &#8211; Bit As (CVE-2025-68596) , Jan 11, 2026
Free Follow-Up Emails &amp; Marketing Automation for WooCommerce &#8211; ShopMagic (CVE-2025-69093) , Jan 11, 2026
SALESmanago (CVE-2025-68571) , Jan 11, 2026