Custom API Generator for Cross Platform and Import Export in WP 2.0.3 Privilege Escalation

🗓️ 13 Jun 2025 00:00:00Reported by NxploitedType

packetstormnews

packetstormnews🔗 packetstorm.news👁 10 Views

Privilege escalation in WordPress Custom API Generator 1.0.0–2.0.3 due to missing capability check.

Reporter	Title	Published	Views	Family All 12
GithubExploit	Exploit for CVE-2025-5288	12 Jun 202519:59	–	githubexploit
Circl	CVE-2025-5288	13 Jun 202502:34	–	circl
CNNVD	WordPress plugin REST API \| Custom API Generator For Cross Platform And Import Export In WP 安全漏洞	13 Jun 202500:00	–	cnnvd
CVE	CVE-2025-5288	13 Jun 202501:47	–	cve
Cvelist	CVE-2025-5288 REST API \| Custom API Generator For Cross Platform And Import Export In WP 1.0.0 - 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function	13 Jun 202501:47	–	cvelist
EUVD	EUVD-2025-18240	3 Oct 202520:07	–	euvd
NVD	CVE-2025-5288	13 Jun 202503:15	–	nvd
Patchstack	WordPress REST API \| Custom API Generator For Cross Platform And Import Export In WP plugin <= 2.0.3 - Missing Authorization to Unauthenticated Privilege Escalation via process_handler Function vulnerability	13 Jun 202506:41	–	patchstack
Positive Technologies	PT-2025-25367 · WordPress · Rest Api \| Custom Api Generator For Cross Platform/Import Export In Wp	12 Jun 202500:00	–	ptsecurity
RedhatCVE	CVE-2025-5288	15 Jun 202502:16	–	redhatcve

13 Jun 2025 00:00Current

8.6High risk

Vulners AI Score8.6

CVSS 3.19.8

EPSS0.00532

SSVC

WordPress Custom API Generator Cross Platform Import Export Privilege Escalation Process Handler