PT-2025-4497 · WordPress · Admin Debug Wordpress – Enable Debug

Abdi Pranata · Published 2025-01-07 · Updated 2025-01-07 · CVE-2025-22503

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Digital Zoom Studio Admin debug wordpress – enable debug versions 1.0.13 and earlier

Description The issue is a Cross-Site Request Forgery (CSRF) vulnerability. It affects the Admin debug wordpress – enable debug, allowing Cross Site Request Forgery when debug is enabled.

Recommendations For versions 1.0.13 and earlier, consider disabling the debug mode to mitigate the risk of exploitation. Restrict access to the Admin debug wordpress – enable debug module to minimize the risk of exploitation. Avoid using the debug feature in the affected Admin debug wordpress – enable debug until the issue is resolved.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-22503

Affected Products

Admin Debug Wordpress – Enable Debug

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-22503 · Security Note
• https://twitter.com/CVEnew/status/1876647474875789574 · Twitter Post
• https://patchstack.com/database/wordpress/plugin/dzs-enable-debug/vulnerability/wordpress-admin-debug-wordpress-enable-debug-plugin-1-0-13-cross-site-request-forgery-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/dzs-enable-debug/vulnerability/wordpress-admin-debug-wordpress-enable-debug-plugin-1-0-13-cross-site-request-forgery-vulnerability?_s_id=cve · Note