CVE-2025-4473

creationtimestamp| type| source ---|---|--- 2025-05-13 07:30:17+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/16085 2025-05-13 08:47:28+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lp23xr4pv42w 2025-05-13 11:21:37+00:00| seen| https://t.me/cvedetector/25171...

CVE-2025-4473 Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxrequest function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends...

CVE-2025-4473

CVE-2025-4473 concerns the WordPress Frontend Dashboard plugin (versions 1.0–2.2.7). The issue is a missing capability check in the ajax_request() function, enabling authenticated users with Subscriber-level access or higher to redirect outgoing emails (e.g., SMTP) to an attacker-controlled serve...

CVE-2025-4473 Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxrequest function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends...