PT-2025-15409 · Wpfront · Wpfront User Role Editor
Brian Sans-Souci
+1
·
Published
2025-04-08
·
Updated
2025-04-08
·
CVE-2025-3064
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions:
WPFront User Role Editor versions up to 4.2.1
Description:
The issue is related to Cross-Site Request Forgery, caused by missing or incorrect nonce validation in the
whitelist options() function. This allows unauthenticated attackers to update the default role option, which can be used for privilege escalation via a forged request. Attackers must trick a site administrator into performing an action, such as clicking on a link. This issue is only exploitable on multisite instances.Recommendations:
For versions up to 4.2.1, update to a version higher than 4.2.1 to resolve the issue. As a temporary workaround, consider restricting access to the
whitelist options() function until a patch is available. Additionally, be cautious when clicking on links from untrusted sources to minimize the risk of exploitation.Fix
LPE
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Wpfront User Role Editor