CVE-2025-12778

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-12778", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-11-05T20:46:27.814Z", "datePublished": "2025-11-20T04:37:14.431Z", "dateUpdated": "2026-04-08T17:14:03.604Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:14:03.604Z"}, "affected": [{"vendor": "userelements", "product": "Ultimate Member Widgets for Elementor \u2013 WordPress User Directory", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Ultimate Member Widgets for Elementor \u2013 WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name, last name and email addresses."}], "title": "Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a917a24b-09cc-48e9-844a-e1ed573a708f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3397029/ultimate-member-widgets-for-elementor"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-862 Missing Authorization", "cweId": "CWE-862", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Powpy"}], "timeline": [{"time": "2025-10-28T00:00:00.000Z", "lang": "en", "value": "Discovered"}, {"time": "2025-11-06T01:52:11.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-11-19T16:28:08.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-11-20T19:26:28.199675Z", "id": "CVE-2025-12778", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-20T19:26:35.250Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-12778", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-11-20T19:26:28.199675Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-11-20T19:26:32.018Z"}}], "cna": {"title": "Ultimate Member Widgets for Elementor <= 2.3 - Missing Authorization to Unauthenticated Information Exposure", "credits": [{"lang": "en", "type": "finder", "value": "Powpy"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N"}}], "affected": [{"vendor": "userelements", "product": "Ultimate Member Widgets for Elementor \u2013 WordPress User Directory", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-10-28T00:00:00.000Z", "value": "Discovered"}, {"lang": "en", "time": "2025-11-06T01:52:11.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-11-19T16:28:08.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a917a24b-09cc-48e9-844a-e1ed573a708f?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset/3397029/ultimate-member-widgets-for-elementor"}], "descriptions": [{"lang": "en", "value": "The Ultimate Member Widgets for Elementor \u2013 WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name, last name and email addresses."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-862", "description": "CWE-862 Missing Authorization"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:14:03.604Z"}}}, "cveMetadata": {"cveId": "CVE-2025-12778", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:14:03.604Z", "dateReserved": "2025-11-05T20:46:27.814Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-11-20T04:37:14.431Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Ultimate Member Widgets for Elementor \u2013 WordPress User Directory", "vendor": "userelements", "versions": [{"lessThanOrEqual": "2.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Ultimate Member Widgets for Elementor \u2013 WordPress User Directory plugin for WordPress is vulnerable to unauthorized access of data due to a missing capability check on the handle_filter_users function in all versions up to, and including, 2.3. This makes it possible for unauthenticated attackers to extract partial metadata of all WordPress users, including their first name, last name and email addresses."}, {"lang": "es", "value": "El plugin Ultimate Member Widgets for Elementor - WordPress User Directory para WordPress es vulnerable a acceso no autorizado a datos debido a una comprobaci\u00f3n de capacidad faltante en la funci\u00f3n 'handle_filter_users' en todas las versiones hasta la 2.3, inclusive. Esto hace posible que atacantes no autenticados extraigan metadatos parciales de todos los usuarios de WordPress, incluyendo su nombre, apellido y direcciones de correo electr\u00f3nico."}], "id": "CVE-2025-12778", "lastModified": "2026-10-18T20:10:00.110", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-12778", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-11-20T19:26:28.199675Z", "version": "2.0.3"}}]}, "published": "2025-11-20T15:17:23.450", "references": [{"source": "security@wordfence.com", "url": "https://plugins.trac.wordpress.org/changeset/3397029/ultimate-member-widgets-for-elementor"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/a917a24b-09cc-48e9-844a-e1ed573a708f?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-862"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T01:28:55.409999+00:00", "value": {"mitigation_remediation": ["Update Ultimate Member Widgets for Elementor to the latest released version (2.4 or newer), which includes the missing capability check.", "If an update is not immediately possible, disable the plugin or restrict its access to trusted administrative users only.", "Apply any custom code patch that adds a capability validation before executing handle_filter_users, ensuring users must have adequate permissions to view user data."], "summary": {"action": "Apply patch", "impact": "Information disclosure of user metadata"}, "threat_synthesis": {"affected_systems": "WordPress sites running the Ultimate Member Widgets for Elementor \u2013 WordPress User Directory plugin versions 2.3 or earlier are affected. The issue applies to all installations of the plugin distributed by userelements.", "description_and_impact": "The vulnerability originates from a missing capability check in the handle_filter_users function of the Ultimate Member Widgets for Elementor plugin. This flaw allows attackers without authentication to retrieve the first name, last name, and email address of all WordPress users. Such partial data exposure can facilitate targeted phishing, identity theft, or further compromise of user accounts, impacting the privacy of site members.", "risk_and_exploitability": "This weakness carries a CVSS score of 5.3 and a very low EPSS probability of less than 1%, indicating that exploitation is unlikely to be widespread but the risk remains present. The vulnerability is not listed in CISA's KEV catalog. An attacker can exploit it by sending unauthenticated requests to the endpoint that invokes handle_filter_users, effectively bypassing authorization checks to gain user metadata."}}}}, "created": "2025-11-21T09:15:49.116542+00:00", "updated": "2026-04-21T01:30:24.402692+00:00", "vendors": ["elementor", "elementor$PRODUCT$elementor", "userelements", "userelements$PRODUCT$ultimate_member_widgets_for_elementor", "wordpress", "wordpress$PRODUCT$wordpress"]}