PT-2025-46266 · WordPress · Crypto++

Published 2025-11-11 · Updated 2025-11-11 · CVE-2025-11986

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Crypto plugin for WordPress versions prior to 2.23

Description The software is susceptible to information exposure due to an unauthenticated AJAX action, wp ajax nopriv crypto connect ajax process, which allows calling the register and savenft methods with only a nonce check and no wallet signature verification. This enables unauthenticated attackers to establish a site-wide global authentication state using a transient, bypassing access controls for all site visitors. This results in a complete bypass of shortcode restrictions and page-level access controls, impacting all visitors for approximately one hour, and allows for arbitrary data injection into the custom users table.

Recommendations Update to version 2.23 or later.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

CVE-2025-11986

Affected Products

Crypto++

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2025-11986 · Security Note
• https://twitter.com/CVEnew/status/1988095299231928696 · Twitter Post
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto_connect_ajax_register.php#L9 · Note
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto_connect_ajax_register.php#L65 · Note
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto-user.php#L95 · Note
• https://plugins.trac.wordpress.org/browser/crypto/tags/2.22/includes/class-crypto_connect_ajax_register.php#L95 · Note
• https://wordfence.com/threat-intel/vulnerabilities/id/f062ef94-e558-478e-bbfd-06616aeb566b?source=cve · Note