CVE-2025-5483

The LC Wizard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check in the ghl-wizard/inc/wp_user.php file in versions 1.2.10 to 1.3.0. This makes it possible for unauthenticated attackers to create new user accounts with the administrator role when the PRO functionality is enabled.

CVSS v3 8.1 HIGH

8.1^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.2 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity HIGH

Privileges Required NONE

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://plugins.trac.wordpress.org/changeset/3366906
https://www.wordfence.com/threat-intel/vulnerabilities/id/42dcc302-b543-42c7-99fa-605f017beb1a?source=cve

Configurations

No configuration.

History

07 Oct 2026, 21:10

Type	Values Removed	Values Added
Summary		(es) El plugin LC Wizard para WordPress es vulnerable a escalada de privilegios debido a una comprobación de capacidad faltante en el archivo ghl-wizard/inc/wp_user.php en las versiones 1.2.10 a 1.3.0. Esto permite a atacantes no autenticados crear nuevas cuentas de usuario con el rol de administrador cuando la funcionalidad PRO está habilitada.

Information

Published : 2025-11-07 04:15

Updated : 2026-10-07 21:10

NVD link : CVE-2025-5483

Mitre link : CVE-2025-5483

CVE.ORG link : CVE-2025-5483

JSON object : View

Products Affected

No product.

CWE

CWE-862

Missing Authorization

{"id": "CVE-2025-5483", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-5483", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-07T17:47:03.687271Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.1, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "HIGH", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.2}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "niaj", "product": "Connector Wizard (formerly LC Wizard)", "versions": [{"status": "affected", "version": "1.2.10", "versionType": "semver", "lessThanOrEqual": "1.3.0"}], "defaultStatus": "unaffected"}]}], "published": "2025-11-07T04:15:46.630", "references": [{"url": "https://plugins.trac.wordpress.org/changeset/3366906", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/42dcc302-b543-42c7-99fa-605f017beb1a?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-862"}]}], "descriptions": [{"lang": "en", "value": "The LC Wizard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check in the ghl-wizard/inc/wp_user.php file in versions 1.2.10 to 1.3.0. This makes it possible for unauthenticated attackers to create new user accounts with the administrator role when the PRO functionality is enabled."}, {"lang": "es", "value": "El plugin LC Wizard para WordPress es vulnerable a escalada de privilegios debido a una comprobaci\u00f3n de capacidad faltante en el archivo ghl-wizard/inc/wp_user.php en las versiones 1.2.10 a 1.3.0. Esto permite a atacantes no autenticados crear nuevas cuentas de usuario con el rol de administrador cuando la funcionalidad PRO est\u00e1 habilitada."}], "lastModified": "2026-10-07T21:10:00.200", "sourceIdentifier": "security@wordfence.com"}