CVE-2025-12182

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12182", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-10-24T19:16:49.591Z", "datePublished": "2025-11-15T03:27:01.199Z", "dateUpdated": "2026-04-08T16:48:45.900Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:48:45.900Z"}, "affected": [{"vendor": "qodeinteractive", "product": "Qi Blocks", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.4.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize_image_callback()` function in all versions up to, and including, 1.4.3. This is due to the plugin not properly verifying that a user has permission to resize a specific attachment. This makes it possible for authenticated attackers, with Contributor-level access and above, to resize arbitrary media library images belonging to other users, which can result in unintended file writes, disk consumption, and server resource abuse through processing of large images."}], "title": "Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/41b0b12f-ff52-4913-aa54-3fbaf0839959?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/qi-blocks/tags/1.4.3/inc/media/class-qi-blocks-media.php#L138"}, {"url": "https://plugins.trac.wordpress.org/changeset/3387712/qi-blocks/trunk/inc/media/class-qi-blocks-media.php"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-284 Improper Access Control", "cweId": "CWE-284", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "baseScore": 4.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Adrian Lukita"}], "timeline": [{"time": "2025-10-24T19:32:01.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-14T15:11:31.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-17T18:41:41.528953Z", "id": "CVE-2025-12182", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-17T18:41:49.941Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12182", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-17T18:41:41.528953Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-17T18:41:46.347Z"}}], "cna": {"title": "Qi Blocks <= 1.4.3 - Missing Authorization to Arbitrary Attachment Resize", "credits": [{"lang": "en", "type": "finder", "value": "Adrian Lukita"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 4.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "qodeinteractive", "product": "Qi Blocks", "versions": [{"status": "affected", "version": "*", "versionType": "semver", "lessThanOrEqual": "1.4.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-24T19:32:01.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-14T15:11:31.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/41b0b12f-ff52-4913-aa54-3fbaf0839959?source=cve"}, {"url": "https://plugins.trac.wordpress.org/browser/qi-blocks/tags/1.4.3/inc/media/class-qi-blocks-media.php#L138"}, {"url": "https://plugins.trac.wordpress.org/changeset/3387712/qi-blocks/trunk/inc/media/class-qi-blocks-media.php"}], "descriptions": [{"lang": "en", "value": "The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize_image_callback()` function in all versions up to, and including, 1.4.3. This is due to the plugin not properly verifying that a user has permission to resize a specific attachment. This makes it possible for authenticated attackers, with Contributor-level access and above, to resize arbitrary media library images belonging to other users, which can result in unintended file writes, disk consumption, and server resource abuse through processing of large images."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-284", "description": "CWE-284 Improper Access Control"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2025-11-15T03:27:01.199Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12182", "state": "PUBLISHED", "dateUpdated": "2025-11-17T18:41:49.941Z", "dateReserved": "2025-10-24T19:16:49.591Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-15T03:27:01.199Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Qi Blocks", "vendor": "qodeinteractive", "versions": [{"lessThanOrEqual": "1.4.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Qi Blocks plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on the `resize_image_callback()` function in all versions up to, and including, 1.4.3. This is due to the plugin not properly verifying that a user has permission to resize a specific attachment. This makes it possible for authenticated attackers, with Contributor-level access and above, to resize arbitrary media library images belonging to other users, which can result in unintended file writes, disk consumption, and server resource abuse through processing of large images."}, {"lang": "es", "value": "El plugin Qi Blocks para WordPress es vulnerable a acceso no autorizado debido a una verificaci\u00f3n de capacidad faltante en la funci\u00f3n 'resize_image_callback()' en todas las versiones hasta la 1.4.3, inclusive. Esto se debe a que el plugin no verifica correctamente que un usuario tiene permiso para redimensionar un archivo adjunto espec\u00edfico. Esto hace posible que atacantes autenticados, con acceso de nivel Colaborador y superior, redimensionen im\u00e1genes arbitrarias de la biblioteca de medios pertenecientes a otros usuarios, lo que puede resultar en escrituras de archivos no intencionadas, consumo de disco y abuso de recursos del servidor mediante el procesamiento de im\u00e1genes grandes."}], "id": "CVE-2025-12182", "lastModified": "2026-10-07T21:10:00.200", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 4.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12182", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-17T18:41:41.528953Z", "version": "2.0.3"}}]}, "published": "2025-11-15T04:15:55.570", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/browser/qi-blocks/tags/1.4.3/inc/media/class-qi-blocks-media.php#L138"}, {"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3387712/qi-blocks/trunk/inc/media/class-qi-blocks-media.php"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/41b0b12f-ff52-4913-aa54-3fbaf0839959?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-284"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T11:58:38.621858+00:00", "value": {"mitigation_remediation": ["Upgrade Qi Blocks to a patched version (1.5.x or newer) that restores the missing capability check.", "If an upgrade cannot be performed immediately, disable or uninstall the plugin\u2019s image resizing functionality until a fix is applied.", "Review WordPress user roles and limit the number of accounts with Contributor or higher privileges, and consider enforcing media library access controls."], "summary": {"action": "Update Plugin", "impact": "Unauthorized image resizing leading to resource abuse"}, "threat_synthesis": {"affected_systems": "All WordPress sites that have the Qi Blocks plugin from Qode Interactive installed and running version 1.4.3 or earlier are affected. The vulnerability is present in every deployment of those versions and can be exploited by any user account that holds Contributor or higher privileges.", "description_and_impact": "The Qi Blocks plugin for WordPress contains a missing capability check on the resize_image_callback function. This flaw allows an authenticated attacker with Contributor level or higher to target any media library attachment and request that it be resized. The server then creates a new image file and processes the image, which can result in unintended file writes and consume significant disk space or CPU resources, potentially leading to a denial\u2011of\u2011service condition.", "risk_and_exploitability": "The CVSS score of 4.3 indicates a moderate risk. The EPSS score of less than 1% suggests a low probability of exploitation at present, and the vulnerability is not listed in the CISA KEV catalog. Attackers need only valid credentials with Contributor or higher level to trigger the resize operation, after which no further checks are performed. While the likelihood is low, the potential for resource exhaustion warrants timely remediation."}}}}, "created": "2025-11-15T21:25:20.458083+00:00", "updated": "2026-04-22T12:00:05.915112+00:00", "vendors": ["qodeinteractive", "qodeinteractive$PRODUCT$qi_blocks", "wordpress", "wordpress$PRODUCT$wordpress"]}