CVE-2025-1440

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-1440", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-02-18T15:22:26.598Z", "datePublished": "2025-03-26T09:21:51.286Z", "dateUpdated": "2026-04-08T17:17:57.023Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:17:57.023Z"}, "affected": [{"vendor": "mdempfle", "product": "Advanced iFrame", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "2024.5", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the advancediFrameParameterData option with an excessive amount of unvalidated data."}], "title": "Advanced iFrame <= 2024.5 - Unauthenticated Settings Update", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b92913fa-aa1e-40a0-9a48-d730b2102217?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3255604%40advanced-iframe&new=3255604%40advanced-iframe&sfp_email=&sfph_mail=#file1"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-20 Improper Input Validation", "cweId": "CWE-20", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM"}}], "credits": [{"lang": "en", "type": "finder", "value": "Peter Thaleikis"}], "timeline": [{"time": "2025-03-25T00:00:00.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-03-26T17:36:39.634320Z", "id": "CVE-2025-1440", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-26T17:36:49.548Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-1440", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2025-03-26T17:36:39.634320Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-03-26T17:36:45.592Z"}}], "cna": {"title": "Advanced iFrame <= 2024.5 - Unauthenticated Settings Update", "credits": [{"lang": "en", "type": "finder", "value": "Peter Thaleikis"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 5.3, "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N"}}], "affected": [{"vendor": "mdempfle", "product": "Advanced iFrame", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "2024.5"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-03-25T00:00:00.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b92913fa-aa1e-40a0-9a48-d730b2102217?source=cve"}, {"url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3255604%40advanced-iframe&new=3255604%40advanced-iframe&sfp_email=&sfph_mail=#file1"}], "descriptions": [{"lang": "en", "value": "The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the advancediFrameParameterData option with an excessive amount of unvalidated data."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-20", "description": "CWE-20 Improper Input Validation"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T17:17:57.023Z"}}}, "cveMetadata": {"cveId": "CVE-2025-1440", "state": "PUBLISHED", "dateUpdated": "2026-04-08T17:17:57.023Z", "dateReserved": "2025-02-18T15:22:26.598Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-03-26T09:21:51.286Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Advanced iFrame", "vendor": "mdempfle", "versions": [{"lessThanOrEqual": "2024.5", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:tinywebgallery:advanced_iframe:*:*:*:*:*:wordpress:*:*", "matchCriteriaId": "53C01C36-5E7E-46D1-81A8-93CC1CC076EE", "versionEndExcluding": "2025.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Advanced iFrame plugin for WordPress is vulnerable to unauthorized excessive creation of options on the aip_map_url_callback() function in all versions up to, and including, 2024.5 due to insufficient restrictions. This makes it possible for unauthenticated attackers to update the advancediFrameParameterData option with an excessive amount of unvalidated data."}, {"lang": "es", "value": "El complemento Advanced iFrame para WordPress es vulnerable a la creaci\u00f3n excesiva no autorizada de opciones en la funci\u00f3n aip_map_url_callback() en todas las versiones hasta la 2024.5 incluida, debido a restricciones insuficientes. Esto permite que atacantes no autenticados actualicen la opci\u00f3n advancediFrameParameterData con una cantidad excesiva de datos no validados."}], "id": "CVE-2025-1440", "lastModified": "2026-06-17T08:39:08.593", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.3, "baseSeverity": "MEDIUM", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 1.4, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-1440", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2025-03-26T17:36:39.634320Z", "version": "2.0.3"}}]}, "published": "2025-03-26T10:15:15.260", "references": [{"source": "security@wordfence.com", "tags": ["Patch"], "url": "https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3255604%40advanced-iframe&new=3255604%40advanced-iframe&sfp_email=&sfph_mail=#file1"}, {"source": "security@wordfence.com", "tags": ["Third Party Advisory"], "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/b92913fa-aa1e-40a0-9a48-d730b2102217?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-20"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-21T21:40:00.448061+00:00", "value": {"mitigation_remediation": ["Review and enforce proper access controls on the aip_map_url_callback endpoint, ensuring only authenticated users can modify plugin options; validate all incoming data before it is stored", "Update the Advanced iFrame plugin to the latest available version (2024.6 or later) if a patch is released; otherwise replace the plugin with an alternative that has proper input validation", "Implement a Web Application Firewall rule or rate\u2011limit the plugin\u2019s settings endpoint to prevent excessive or malformed option updates, and log all attempts to detect ongoing abuse"], "summary": {"action": "Patch immediately", "impact": "Unauthorized configuration changes"}, "threat_synthesis": {"affected_systems": "WordPress sites that have the Advanced iFrame plugin installed, vendor mdempfle, product Advanced iFrame. All versions up to and including 2024.5 are affected; any installation of these versions is vulnerable regardless of WordPress core version or other plugins.", "description_and_impact": "The Advanced iFrame plugin for WordPress is vulnerable to the creation of excessive options within the aip_map_url_callback() function in all releases up to 2024.5. Because the function does not properly restrict input, unauthenticated attackers can inject large amounts of unvalidated data into the advancediFrameParameterData option. This enables attackers to alter plugin settings at will, potentially leading to undesired behavior or further exploitation if the inserted data is used in downstream logic. The weakness stems from lack of input validation as classified by CWE-20.", "risk_and_exploitability": "The vulnerability scores a CVSS score of 5.3, reflecting moderate severity. The EPSS score is less than 1%, indicating very low overall exploitation probability. It is not listed in the CISA KEV catalog. Attackers would need to access the remote WordPress installation and issue a request to the callback endpoint; because the manipulation is available to unauthenticated users, the likely attack vector is remote web. Given the moderate score and low exploitation likelihood, the risk to a single site is lower than high\u2011severity flaws, but the impact can be significant if the site relies on the plugin for critical functionality."}}}}, "created": "2025-07-12T22:09:23.578805+00:00", "updated": "2026-04-21T21:45:25.847494+00:00", "vendors": ["wordpress", "wordpress$PRODUCT$wordpress"]}