PT-2025-46266 · WordPress · Crypto++

CVE-2025-11986 · Publicado 2025-11-11 · Atualizado 2025-11-11

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Crypto plugin for WordPress versions prior to 2.23

Description The software is susceptible to information exposure due to an unauthenticated AJAX action, wp ajax nopriv crypto connect ajax process, which allows calling the register and savenft methods with only a nonce check and no wallet signature verification. This enables unauthenticated attackers to establish a site-wide global authentication state using a transient, bypassing access controls for all site visitors. This results in a complete bypass of shortcode restrictions and page-level access controls, impacting all visitors for approximately one hour, and allows for arbitrary data injection into the custom users table.

Recommendations Update to version 2.23 or later.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

CVE-2025-11986

Produtos afetados

Crypto++

Referências · 7

• https://twitter.com/CVEnew/status/1988095299231928696 · Publicação no Twitter
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto_connect_ajax_register.php#L9 · Nota
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto_connect_ajax_register.php#L65 · Nota
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto-user.php#L95 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2025-11986 · Nota de Segurança
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto_connect_ajax_register.php#L95 · Nota
• https://wordfence.com/threat-intel/vulnerabilities/id/f062ef94-e558-478e-bbfd-06616aeb566b?source=cve · Nota