CVE-2025-0181
Published: 11 February 2025
Description
The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authentication cookie. This makes it possible for unauthenticated attackers to gain access to a target user's (e.g. administrators) account.
Security Summary
CVE-2025-0181 is a privilege escalation vulnerability via account takeover in the WP Foodbakery plugin for WordPress, affecting all versions up to and including 4.8. The flaw stems from the plugin not properly validating a user's identity before setting the current user and their authentication cookie, as classified under CWE-288. It carries a CVSS v3.1 base score of 9.8 (AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H), indicating critical severity due to its high impact on confidentiality, integrity, and availability.
Unauthenticated attackers can exploit this vulnerability remotely over the network with low attack complexity and no privileges or user interaction required. Exploitation allows them to impersonate any target user, such as administrators, thereby gaining unauthorized access to the account and potentially full control over the affected WordPress site.
Advisories from Wordfence provide further details on the vulnerability at https://www.wordfence.com/threat-intel/vulnerabilities/id/d722ec8d-bfca-4da1-8eb0-8d33735c5e44?source=cve, while the plugin is hosted on ThemeForest at https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331. The CVE was published on 2025-02-11T07:15:29.827.
Details
- CWE(s)