CVE-2025-5821

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-5821", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "state": "PUBLISHED", "assignerShortName": "Wordfence", "dateReserved": "2025-06-06T19:12:24.245Z", "datePublished": "2025-08-23T06:43:35.611Z", "dateUpdated": "2026-04-08T16:47:36.348Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:47:36.348Z"}, "affected": [{"vendor": "Case-Themes", "product": "Case Theme User", "versions": [{"version": "0", "status": "affected", "lessThanOrEqual": "1.0.3", "versionType": "semver"}], "defaultStatus": "unaffected"}], "descriptions": [{"lang": "en", "value": "The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_callback() function. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email."}], "title": "Case Theme User <= 1.0.3 - Authentication Bypass via Social Login", "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ce95a04-11bd-488e-ad25-1b661e083eb2?source=cve"}, {"url": "https://themeforest.net/item/consultio-consulting-business-wordpress/25376496"}], "problemTypes": [{"descriptions": [{"lang": "en", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel", "cweId": "CWE-288", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "baseScore": 9.8, "baseSeverity": "CRITICAL"}}], "credits": [{"lang": "en", "type": "finder", "value": "Friderika Baranyai"}], "timeline": [{"time": "2025-06-25T13:09:57.000Z", "lang": "en", "value": "Vendor Notified"}, {"time": "2025-08-22T18:31:18.000Z", "lang": "en", "value": "Disclosed"}]}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-08-25T18:17:09.014095Z", "id": "CVE-2025-5821", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-25T18:17:24.250Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2025-5821", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "total"}], "version": "2.0.3", "timestamp": "2025-08-25T18:17:09.014095Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-08-25T18:17:17.864Z"}}], "cna": {"title": "Case Theme User <= 1.0.3 - Authentication Bypass via Social Login", "credits": [{"lang": "en", "type": "finder", "value": "Friderika Baranyai"}], "metrics": [{"cvssV3_1": {"version": "3.1", "baseScore": 9.8, "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}}], "affected": [{"vendor": "Case-Themes", "product": "Case Theme User", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.0.3"}], "defaultStatus": "unaffected"}], "timeline": [{"lang": "en", "time": "2025-06-25T13:09:57.000Z", "value": "Vendor Notified"}, {"lang": "en", "time": "2025-08-22T18:31:18.000Z", "value": "Disclosed"}], "references": [{"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ce95a04-11bd-488e-ad25-1b661e083eb2?source=cve"}, {"url": "https://themeforest.net/item/consultio-consulting-business-wordpress/25376496"}], "descriptions": [{"lang": "en", "value": "The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_callback() function. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-288", "description": "CWE-288 Authentication Bypass Using an Alternate Path or Channel"}]}], "providerMetadata": {"orgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "shortName": "Wordfence", "dateUpdated": "2026-04-08T16:47:36.348Z"}}}, "cveMetadata": {"cveId": "CVE-2025-5821", "state": "PUBLISHED", "dateUpdated": "2026-04-08T16:47:36.348Z", "dateReserved": "2025-06-06T19:12:24.245Z", "assignerOrgId": "b15e7b5b-3da4-40ae-a43c-f7aa60e62599", "datePublished": "2025-08-23T06:43:35.611Z", "assignerShortName": "Wordfence"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"defaultStatus": "unaffected", "product": "Case Theme User", "vendor": "Case-Themes", "versions": [{"lessThanOrEqual": "1.0.3", "status": "affected", "version": "0", "versionType": "semver"}]}], "source": "security@wordfence.com"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "The Case Theme User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.3. This is due to the plugin not properly logging in a user with the data that was previously verified through the facebook_ajax_login_callback() function. This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site which can easily be created by default through the temp user functionality, and access to the administrative user's email."}, {"lang": "es", "value": "El complemento Case Theme User para WordPress es vulnerable a la omisi\u00f3n de autenticaci\u00f3n en todas las versiones hasta la 1.0.3 incluida. Esto se debe a que el complemento no inicia sesi\u00f3n correctamente con los datos previamente verificados mediante facebook_ajax_login_callback(). Esto permite que atacantes no autenticados inicien sesi\u00f3n como usuarios administrativos, siempre que tengan una cuenta en el sitio y acceso al correo electr\u00f3nico del usuario administrativo."}], "id": "CVE-2025-5821", "lastModified": "2026-06-17T09:48:48.753", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "security@wordfence.com", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-5821", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "total"}], "role": "CISA Coordinator", "timestamp": "2025-08-25T18:17:09.014095Z", "version": "2.0.3"}}]}, "published": "2025-08-23T07:15:32.507", "references": [{"source": "security@wordfence.com", "url": "https://themeforest.net/item/consultio-consulting-business-wordpress/25376496"}, {"source": "security@wordfence.com", "url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/3ce95a04-11bd-488e-ad25-1b661e083eb2?source=cve"}], "sourceIdentifier": "security@wordfence.com", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-288"}], "source": "security@wordfence.com", "type": "Secondary"}]}

{}

{"analysis": {"en": {"generated_at": "2026-04-22T00:54:30.474833+00:00", "value": {"mitigation_remediation": ["Upgrade the Case Theme User plugin to a patched version (e.g., 1.0.4 or later) that resolves the authentication bypass (CWE\u2011288) when it becomes available.", "If an update is not available, disable temporary user registration and block social login until a patch is applied to eliminate the CWE\u2011288 flaw.", "Implement a web application firewall rule that limits or blocks repeated requests to the facebook_ajax_login_callback endpoint to mitigate potential abuse of the authentication bypass.", "Monitor the WordPress user database for unexpected administrative logins and ensure only legitimate accounts are accessed via social login."], "summary": {"action": "Immediate Patch", "impact": "Authentication Bypass"}, "threat_synthesis": {"affected_systems": "Case Theme User plugin for WordPress, distributed by Case-Themes, all released versions up to and including 1.0.3 are affected. Administrators enabling social login via Facebook with temporary user registration are at risk.", "description_and_impact": "The vulnerable plugin fails to properly complete user authentication after the facebook_ajax_login_callback function verifies Facebook credentials, revealing a CWE\u2011288 Authentication Bypass flaw. As a result, unauthenticated users can obtain administrative access provided they can create a temporary user account and possess the target admin's email address. This flaw allows an attacker to compromise the confidentiality, integrity, and availability of the entire WordPress site, effectively bypassing the authentication system.", "risk_and_exploitability": "The CVSS score of 9.8 classifies the issue as critical, and the low EPSS score (<1%) indicates a currently low exploitation probability, yet the vulnerability remains high risk because it permits a complete break of security controls through a CWE\u2011288 Authentication Bypass. Attackers are likely to trigger the flaw by first creating a temporary user account and then accessing the facebook_ajax_login_callback endpoint with the email address of an administrative user."}}}}, "created": "2025-08-23T17:27:26.058659+00:00", "updated": "2026-04-22T01:00:04.362700+00:00", "vendors": ["case-themes", "case-themes$PRODUCT$case_theme_user", "wordpress", "wordpress$PRODUCT$wordpress"]}