CVE-2025-1315

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1315", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-02-14T21:44:40.875Z", "datePublished": "2025-03-07T08:21:27.759Z", "dateUpdated": "2026-04-08T17:29:38.710Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:29:38.710Z"}, "affected": [{"vendor": "sfwebservice", "product": "InWave Jobs", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "3.5.1", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account."}], "title": "InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e49c7b2a-5241-4762-b7c9-c33b1ac4a668?source=cve"}, {"url": "https://themeforest.net/item/injob-job-board-wordpress-theme/20322987"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel", "cweId": "CWE-288", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "timeline": [{"time": "2025-03-06T19:32:50.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-07T15:04:44.583207Z", "id": "CVE-2025-1315", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-07T15:05:16.471Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1315", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-03-07T15:04:44.583207Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-07T15:05:11.715Z"}}], "cna": {"title": "InWave Jobs <= 3.5.1 - Unauthenticated Privilege Escalation via Password Reset", "credits": [{"lang": "en", "type": "finder", "value": "Tonn"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "sfwebservice", "product": "InWave Jobs", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "3.5.1"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-03-06T19:32:50.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e49c7b2a-5241-4762-b7c9-c33b1ac4a668?source=cve"}, {"url": "https://themeforest.net/item/injob-job-board-wordpress-theme/20322987"}], "descriptions": [{"lang": "en", "value": "The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:29:38.710Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1315", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:29:38.710Z", "dateReserved": "2025-02-14T21:44:40.875Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-03-07T08:21:27.759Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "InWave Jobs", "vendor": "sfwebservice", "versions": [{"lessThanOrEqual": "3.5.1", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:sfwebservice:injob:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "D0BEC03F-2B50-4A98-A548-F79ADE5BA549", "versionEndIncluding": "3.5.1", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The InWave Jobs plugin for WordPress is vulnerable to privilege escalation via password reset in all versions up to, and including, 3.5.1. This is due to the plugin not properly validating a user's identity prior to updating their password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account."}, {"lang": "es", "value": "El complemento InWave Jobs para WordPress es vulnerable a la escalada de privilegios mediante el restablecimiento de contrase\u00f1a en todas las versiones hasta la 3.5.1 incluida. Esto se debe a que el complemento no valida correctamente la identidad de un usuario antes de actualizar su contrase\u00f1a. Esto hace posible que atacantes no autenticados cambien las contrase\u00f1as de usuarios arbitrarios, incluidos los administradores, y aprovechen esa posibilidad para obtener acceso a su cuenta."}], "id": "CVE-2025-1315", "lastModified": "2026-06-17T08:38:54.457", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-1315", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-03-07T15:04:44.583207Z", "version": "2.0.3"}}]}, "published": "2025-03-07T09:15:16.313", "references": [{"source": "security@wordfence.com", "tags": ["Product"], "url": "https://themeforest.net/item/injob-job-board-wordpress-theme/20322987"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/e49c7b2a-5241-4762-b7c9-c33b1ac4a668?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-288"}], "source": "security@wordfence.com", "type": "Secondary"}, {"description": [{"lang": "en", "value": "CWE-306"}], "source": "nvd@nist.gov", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-20T23:39:32.284604+00:00", "value": {"mitigation_remediation": ["Update the InWave Jobs plugin to version 3.5.2 or later, which removes the vulnerability.", "If an immediate upgrade is not feasible, block or restrict remote access to the password reset endpoint using web application firewall rules or server\u2011side access controls.", "Force all site users to change their passwords and audit administrator accounts for unauthorized changes."], "summary": {"action": "Immediate Patch", "impact": "Privilege Escalation via Unauthenticated Password Reset"}, "threat_synthesis": {"affected_systems": "InWave Jobs plugin versions up to and including 3.5.1 for WordPress sites are affected. The vulnerable component is identified by the vendor sfwebservice as \"InWave Jobs\" and is listed in the CPE string cpe:2.3:a:sfwebservice:injob:*:*:*:*:*:wordpress:*:*.", "description_and_impact": "The InWave Jobs plugin for WordPress allows an attacker who is not logged in to reset the passwords of any user account, including administrators. The flaw lies in the lack of proper identity verification before the password update is processed, a form of insecure authentication. As a result, an unauthenticated attacker can assume the role of any user, compromising confidentiality, integrity, and availability of the site\u2019s administrative functions. The weakness is classified under CWE-288 and CWE-306, reflecting authentication failure and insecure password handling.", "risk_and_exploitability": "The CVSS score of 9.8 marks this as a critical vulnerability. However, the EPSS score of less than 1% indicates that historically very few exploits have been observed, and it is not currently listed in the CISA KEV catalog. The likely attack vector is a remote web request to the password reset endpoint, which can be performed without authentication. An attacker could simply send a reset request for any target username and, due to the lack of verification, receive a new password for that account. Once the password is changed, the attacker can log in as the target user and exploit administrative privileges."}}}}, "created": "2026-04-20T23:45:21.606493+00:00", "updated": "2026-04-20T23:45:21.606504+00:00", "vendors": []}