CVE-2025-4665

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-4665", "assignerOrgId": "027e81ed-0dd4-4685-ab4d-884aec5bb484", "state": "PUBLISHED", "assignerShortName": "Mandiant", "dateReserved": "2025-05-13T19:40:03.481Z", "datePublished": "2025-10-28T23:54:29.436Z", "dateUpdated": "2025-10-29T14:48:16.726Z"}, "containers": {"cna": {"affected": [{"collectionURL": "https://wordpress.org/plugins/contact-form-cfdb7/", "defaultStatus": "unaffected", "product": "CFDB7", "vendor": "WordPress Contact Form 7 Database Addon CFDB7 By Arshid", "versions": [{"changes": [{"at": "1.3.3", "status": "unaffected"}], "lessThanOrEqual": "1.3.2", "status": "affected", "version": "0.0.0", "versionType": "custom"}]}], "cpeApplicability": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:wordpress_contact_form_7_database_addon_cfdb7_by_arshid:cfdb7:*:*:*:*:*:*:*:*", "versionEndIncluding": "1.3.2", "versionStartIncluding": "0.0.0", "vulnerable": true}], "negate": false, "operator": "OR"}], "operator": "OR"}], "credits": [{"lang": "en", "type": "finder", "value": "Abdulrahman Nour, Mandiant"}], "descriptions": [{"lang": "en", "supportingMedia": [{"base64": false, "type": "text/html", "value": "WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection in PHP. Although the issue is remotely exploitable without authentication, it does require a crafted interaction with the affected endpoint in order to trigger successfully."}], "value": "WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection in PHP. Although the issue is remotely exploitable without authentication, it does require a crafted interaction with the affected endpoint in order to trigger successfully."}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "problemTypes": [{"descriptions": [{"cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"orgId": "027e81ed-0dd4-4685-ab4d-884aec5bb484", "shortName": "Mandiant", "dateUpdated": "2025-10-28T23:54:29.436Z"}, "references": [{"tags": ["third-party-advisory", "technical-description"], "url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0006.md"}, {"tags": ["product"], "url": "https://wordpress.org/plugins/contact-form-cfdb7"}], "source": {"discovery": "UNKNOWN"}, "x_generator": {"engine": "Vulnogram 0.4.0"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-10-29T14:48:03.383396Z", "id": "CVE-2025-4665", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-29T14:48:16.726Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-4665", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-10-29T14:48:03.383396Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-10-29T14:48:13.275Z"}}], "cna": {"source": {"discovery": "UNKNOWN"}, "credits": [{"lang": "en", "type": "finder", "value": "Abdulrahman Nour, Mandiant"}], "impacts": [{"capecId": "CAPEC-66", "descriptions": [{"lang": "en", "value": "CAPEC-66 SQL Injection"}]}], "metrics": [{"format": "CVSS", "cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.6, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "scenarios": [{"lang": "en", "value": "GENERAL"}]}], "affected": [{"vendor": "WordPress Contact Form 7 Database Addon CFDB7 By Arshid", "product": "CFDB7", "versions": [{"status": "affected", "changes": [{"at": "1.3.3", "status": "unaffected"}], "version": "0.0.0", "versionType": "custom", "lessThanOrEqual": "1.3.2"}], "collectionURL": "https://wordpress.org/plugins/contact-form-cfdb7/", "defaultStatus": "unaffected"}], "references": [{"url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0006.md", "tags": ["third-party-advisory", "technical-description"]}, {"url": "https://wordpress.org/plugins/contact-form-cfdb7", "tags": ["product"]}], "x_generator": {"engine": "Vulnogram 0.4.0"}, "descriptions": [{"lang": "en", "value": "WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection in PHP. Although the issue is remotely exploitable without authentication, it does require a crafted interaction with the affected endpoint in order to trigger successfully.", "supportingMedia": [{"type": "text/html", "value": "WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection in PHP. Although the issue is remotely exploitable without authentication, it does require a crafted interaction with the affected endpoint in order to trigger successfully.", "base64": false}]}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-89", "description": "CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')"}]}], "cpeApplicability": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wordpress_contact_form_7_database_addon_cfdb7_by_arshid:cfdb7:*:*:*:*:*:*:*:*", "vulnerable": true, "versionEndIncluding": "1.3.2", "versionStartIncluding": "0.0.0"}], "operator": "OR"}], "operator": "OR"}], "providerMetadata": {"orgId": "027e81ed-0dd4-4685-ab4d-884aec5bb484", "shortName": "Mandiant", "dateUpdated": "2025-10-28T23:54:29.436Z"}}}, "cveMetadata": {"cveId": "CVE-2025-4665", "state": "PUBLISHED", "dateUpdated": "2025-10-29T14:48:16.726Z", "dateReserved": "2025-05-13T19:40:03.481Z", "assignerOrgId": "027e81ed-0dd4-4685-ab4d-884aec5bb484", "datePublished": "2025-10-28T23:54:29.436Z", "assignerShortName": "Mandiant"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"collectionURL": "https://wordpress.org/plugins/contact-form-cfdb7/", "defaultStatus": "unaffected", "product": "CFDB7", "vendor": "WordPress Contact Form 7 Database Addon CFDB7 By Arshid", "versions": [{"changes": [{"at": "1.3.3", "status": "unaffected"}], "lessThanOrEqual": "1.3.2", "status": "affected", "version": "0.0.0", "versionType": "custom"}]}], "source": "mandiant-cve@google.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "WordPress plugin Contact Form CFDB7 versions up to and including 1.3.2 are affected by a pre-authentication SQL injection vulnerability that cascades into insecure deserialization (PHP Object Injection). The weakness arises due to insufficient validation of user input in plugin endpoints, allowing crafted input to influence backend queries in unexpected ways. Using specially crafted payloads, this can escalate into unsafe deserialization, enabling arbitrary object injection in PHP. Although the issue is remotely exploitable without authentication, it does require a crafted interaction with the affected endpoint in order to trigger successfully."}, {"lang": "es", "value": "El plugin de WordPress Contact Form CFDB7 versiones hasta la 1.3.2 inclusive se ven afectadas por una vulnerabilidad de inyecci\u00f3n SQL de pre-autenticaci\u00f3n que se propaga a la deserializaci\u00f3n insegura (Inyecci\u00f3n de Objetos PHP). La debilidad surge debido a la validaci\u00f3n insuficiente de la entrada del usuario en los puntos finales del plugin, permitiendo que una entrada manipulada influya en las consultas de backend de formas inesperadas. Usando cargas \u00fatiles especialmente dise\u00f1adas, esto puede escalar a la deserializaci\u00f3n insegura, permitiendo la inyecci\u00f3n arbitraria de objetos en PHP. Aunque el problema es explotable remotamente sin autenticaci\u00f3n, s\u00ed requiere una interacci\u00f3n manipulada con el punto final afectado para activarse con \u00e9xito."}], "id": "CVE-2025-4665", "lastModified": "2026-10-08T11:10:00.250", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.6, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 6.0, "source": "mandiant-cve@google.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-4665", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-10-29T14:48:03.383396Z", "version": "2.0.3"}}]}, "published": "2025-10-29T00:15:34.970", "references": [{"source": "mandiant-cve@google.com", "url": "https://github.com/mandiant/Vulnerability-Disclosures/blob/master/2025/MNDT-2025-0006.md"}, {"source": "mandiant-cve@google.com", "url": "https://wordpress.org/plugins/contact-form-cfdb7"}], "sourceIdentifier": "mandiant-cve@google.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "mandiant-cve@google.com", "type": "Secondary"}]}

{}

{"created": "2025-10-29T10:57:37.089710+00:00", "updated": "2025-10-29T10:57:37.089736+00:00", "vendors": ["arshid", "arshid$PRODUCT$wordpress_contact_form_cfdb7", "wordpress", "wordpress$PRODUCT$wordpress"]}