PT-2025-5548 · Codesolz · Codesolz Better Find/Replace

Ananda Dhakal · Published 2025-01-27 · Updated 2025-01-29 · CVE-2025-24734

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions CodeSolz Better Find and Replace versions 1.6.7 and earlier

Description The issue is related to a Missing Authorization vulnerability in CodeSolz Better Find and Replace, which allows Privilege Escalation. This means that an attacker could potentially exploit this vulnerability to gain higher privileges than intended.

Recommendations For versions 1.6.7 and earlier, update to a version that includes the fix for this issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

LPE

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-24734

Affected Products

Codesolz Better Find/Replace

References · 9

• https://nvd.nist.gov/vuln/detail/CVE-2025-24734 · Security Note
• https://t.me/cvedetector/16477 · Telegram Post
• https://patchstack.com/database/wordpress/plugin/real-time-auto-find-and-replace/vulnerability/wordpress-better-find-and-replace-plugin-1-6-7-privilege-escalation-vulnerability?_s_id=cve · Note
• https://patchstack.com/database/Wordpress/Plugin/real-time-auto-find-and-replace/vulnerability/wordpress-better-find-and-replace-plugin-1-6-7-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/BursaMatus/status/1883933486391734272 · Twitter Post
• https://twitter.com/BursaMatus/status/1883934256944103716 · Twitter Post
• https://twitter.com/yeraisci_/status/1884584889078759447 · Twitter Post
• https://twitter.com/CveFindCom/status/1883885795062296637 · Twitter Post
• https://twitter.com/CVEnew/status/1883888543694553132 · Twitter Post