CVE-2025-0181

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-0181", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-01-02T20:46:55.396Z", "datePublished": "2025-02-11T06:54:34.607Z", "dateUpdated": "2026-04-08T17:26:32.148Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:26:32.148Z"}, "affected": [{"vendor": "Chimpstudio", "product": "WP Foodbakery", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "4.8", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authentication cookie. This makes it possible for unauthenticated attackers to gain access to a target user's (e.g. administrators) account."}], "title": "WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d722ec8d-bfca-4da1-8eb0-8d33735c5e44?source=cve"}, {"url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel", "cweId": "CWE-288", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "timeline": [{"time": "2025-01-01T00:00:00.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-02-10T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-02-11T15:27:29.543559Z", "id": "CVE-2025-0181", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T15:27:43.777Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-0181", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-02-11T15:27:29.543559Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-02-11T15:27:37.378Z"}}], "cna": {"title": "WP Foodbakery <= 4.8 - Authentication Bypass in foodbakery_parse_request", "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Chimpstudio", "product": "WP Foodbakery", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "4.8"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-01-01T00:00:00.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-02-10T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d722ec8d-bfca-4da1-8eb0-8d33735c5e44?source=cve"}, {"url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331"}], "descriptions": [{"lang": "en", "value": "The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authentication cookie. This makes it possible for unauthenticated attackers to gain access to a target user's (e.g. administrators) account."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:26:32.148Z"}}}, "cveMetadata": {"cveId": "CVE-2025-0181", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:26:32.148Z", "dateReserved": "2025-01-02T20:46:55.396Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-02-11T06:54:34.607Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "WP Foodbakery", "vendor": "Chimpstudio", "versions": [{"lessThanOrEqual": "4.8", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.8. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authentication cookie. This makes it possible for unauthenticated attackers to gain access to a target user's (e.g. administrators) account."}, {"lang": "es", "value": "El complemento WP Foodbakery para WordPress es vulnerable a la escalada de privilegios mediante la apropiaci\u00f3n de cuentas en todas las versiones hasta la 4.7 y incluida. Esto se debe a que el complemento no valida correctamente la identidad de un usuario antes de configurar el usuario actual y su cookie de autenticaci\u00f3n. Esto hace posible que atacantes no autenticados obtengan acceso a la cuenta de un usuario objetivo (por ejemplo, administradores)."}], "id": "CVE-2025-0181", "lastModified": "2026-06-17T08:26:01.733", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-0181", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-02-11T15:27:29.543559Z", "version": "2.0.3"}}]}, "published": "2025-02-11T07:15:29.827", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/food-bakery-restaurant-bakery-responsive-wordpress-theme/18970331"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/d722ec8d-bfca-4da1-8eb0-8d33735c5e44?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-288"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T04:16:34.213058+00:00", "value": {"mitigation_remediation": ["Upgrade the WP Foodbakery plugin to the latest available version (greater than 4.8).", "If an immediate upgrade is not possible, restrict access to the foodbakery_parse_request endpoint using a web application firewall or server\u2011level access controls.", "Disable or remove the WP Foodbakery plugin if it is not required for site functionality.", "Monitor user accounts for anomalous login activity and audit privileges regularly."], "summary": {"action": "Update Plugin", "impact": "Privilege Escalation via Account Takeover"}, "threat_synthesis": {"affected_systems": "All released versions of the Chimpstudio WP Foodbakery plugin for WordPress up to and including 4.8 are affected. Sites running any of these versions could be vulnerable to account takeover.", "description_and_impact": "The WP Foodbakery plugin for WordPress contains a flaw that permits an attacker to impersonate any user, including administrators, without authentication. This occurs because the plugin fails to validate a user\u2019s identity before setting the current user and authentication cookie, resulting in improper authentication (CWE-288). Based on the description, it is inferred that the attacker can exploit the vulnerability by sending a crafted request to the foodbakery_parse_request routine, which sets the user context unconditionally.", "risk_and_exploitability": "The CVSS score of 9.8 indicates very high severity. The EPSS score of less than 1% suggests that exploitation is currently unlikely on a wide scale, and the flaw is not catalogued in CISA\u2019s KEV. However, because the flaw can be triggered by an unauthenticated attacker, any publicly reachable WordPress installation that has this plugin can be at risk if an attacker crafts the appropriate request. The high severity coupled with the ease of exploitation makes this a priority for remediation."}}}}, "created": "2025-07-12T22:09:25.276757+00:00", "updated": "2026-04-22T04:30:05.311215+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}