CVE-2025-10637

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-10637", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-09-17T13:30:56.658Z", "datePublished": "2025-10-25T06:49:24.127Z", "dateUpdated": "2026-04-08T17:15:18.459Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:15:18.459Z"}, "affected": [{"vendor": "quadlayers", "product": "Social Feed Gallery", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "4.9.2", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media data from any account the site owner connected to their site."}], "title": "Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ae0dd6b0-9028-456e-9843-d45754c01c53?source=cve"}, {"url": "https://wordpress.org/plugins/insta-gallery/"}, {"url": "https://plugins.trac.wordpress.org/browser/insta-gallery/tags/4.9.2/lib/api/rest/endpoints/frontend/class-user-profile.php#L19"}, {"url": "https://plugins.trac.wordpress.org/changeset/3381423/insta-gallery/trunk/lib/api/rest/endpoints/frontend/class-user-profile.php"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "3r1c"}], "timeline": [{"time": "2025-10-24T18:01:24.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-27T15:38:23.964258Z", "id": "CVE-2025-10637", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-27T15:38:46.458Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-10637", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-10-27T15:38:23.964258Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-27T15:38:41.225Z"}}], "cna": {"title": "Social Feed Gallery <= 4.9.2 - Missing Authorization to Unauthenticated Information Exposure", "credits": [{"lang": "en", "type": "finder", "value": "3r1c"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "quadlayers", "product": "Social Feed Gallery", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "4.9.2"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-24T18:01:24.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ae0dd6b0-9028-456e-9843-d45754c01c53?source=cve"}, {"url": "https://wordpress.org/plugins/insta-gallery/"}, {"url": "https://plugins.trac.wordpress.org/browser/insta-gallery/tags/4.9.2/lib/api/rest/endpoints/frontend/class-user-profile.php#L19"}, {"url": "https://plugins.trac.wordpress.org/changeset/3381423/insta-gallery/trunk/lib/api/rest/endpoints/frontend/class-user-profile.php"}], "descriptions": [{"lang": "en", "value": "The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media data from any account the site owner connected to their site."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:15:18.459Z"}}}, "cveMetadata": {"cveId": "CVE-2025-10637", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:15:18.459Z", "dateReserved": "2025-09-17T13:30:56.658Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-10-25T06:49:24.127Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Social Feed Gallery", "vendor": "quadlayers", "versions": [{"lessThanOrEqual": "4.9.2", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Social Feed Gallery plugin for WordPress is vulnerable to Information Exposure in versions less than, or equal to, 4.9.2. This is due to the plugin not properly verifying that a user is authorized to perform an action. This makes it possible for unauthenticated attackers to exfiltrate Instagram profile and media data from any account the site owner connected to their site."}, {"lang": "es", "value": "El plugin Social Feed Gallery para WordPress es vulnerable a la Exposici\u00f3n de Informaci\u00f3n en versiones inferiores o iguales a 4.9.2. Esto se debe a que el plugin no verifica adecuadamente que un usuario est\u00e1 autorizado para realizar una acci\u00f3n. Esto hace posible que atacantes no autenticados exfiltren datos de perfil y medios de Instagram de cualquier cuenta que el propietario del sitio haya conectado a su sitio."}], "id": "CVE-2025-10637", "lastModified": "2026-10-08T11:10:00.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-10637", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-10-27T15:38:23.964258Z", "version": "2.0.3"}}]}, "published": "2025-10-25T07:15:39.797", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/insta-gallery/tags/4.9.2/lib/api/rest/endpoints/frontend/class-user-profile.php#L19"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3381423/insta-gallery/trunk/lib/api/rest/endpoints/frontend/class-user-profile.php"}, {"source": "security@wordfence.com", "url": "https://wordpress.org/plugins/insta-gallery/"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/ae0dd6b0-9028-456e-9843-d45754c01c53?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T02:03:55.954839+00:00", "value": {"mitigation_remediation": ["Upgrade the Social Feed Gallery plugin to the latest available version that includes the authorization check fix.", "If no patch is immediately available, deactivate or uninstall the plugin until an updated release is deployed.", "Restrict unauthenticated access to the plugin\u2019s REST API endpoints by configuring firewall rules or using a WordPress REST API restriction plugin to block or rate\u2011limit GET requests to the /user-profile endpoint."], "summary": {"action": "Assess Impact", "impact": "Information Exposure"}, "threat_synthesis": {"affected_systems": "vulnerable versions of the quadlayers Social Feed Gallery plugin up to and including 4.9.2. Any WordPress site that has installed and activated the plugin and has connected an Instagram account is at risk. The plugin\u2019s REST endpoint /user-profile is the entry point for the exploit.", "description_and_impact": "The Social Feed Gallery plugin for WordPress has a missing authorization check in its REST API that allows unauthenticated users to retrieve Instagram profile and media data for any Instagram account connected by the site owner. This results in a moderate-information exposure where private content can be exfiltrated without needing credentials, causing a breach of confidentiality. The weakness is identified as a missing authorization control (CWE-862).", "risk_and_exploitability": "The CVSS base score of 5.3 indicates moderate severity. The EPSS score of < 1% shows a very low probability of exploitation observed in the wild, and the vulnerability is not listed in the CISA KEV catalogue. Attackers can exploit the issue by sending unauthenticated GET requests to the plugin\u2019s REST endpoint, which returns sensitive Instagram data. Since no authentication is enforced, the attack surface is public and requires only knowledge of the correct URL."}}}}, "created": "2025-10-27T22:10:16.572630+00:00", "updated": "2026-04-21T02:15:06.518369+00:00", "vendors": ["quadlayers", "quadlayers$PRODUCT$wp_social_feed_gallery", "wordpress", "wordpress$PRODUCT$wordpress"], "weaknesses": ["CWE-862"]}