CVE-2025-9286

{"id": "CVE-2025-9286", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-9286", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-10-03T18:02:51.622311Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "security@wordfence.com", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.8, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 3.9}]}, "affected": [{"source": "security@wordfence.com", "affectedData": [{"vendor": "hancock11", "product": "Appy Pie Connect for WooCommerce", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.1.2"}], "defaultStatus": "unaffected"}]}], "published": "2025-10-03T12:15:47.757", "references": [{"url": "https://plugins.trac.wordpress.org/browser/appy-pie-connect-for-woocommerce/trunk/connect-woocommerce-rest-api.php", "source": "security@wordfence.com"}, {"url": "https://plugins.trac.wordpress.org/changeset/3385150/", "source": "security@wordfence.com"}, {"url": "https://wordpress.org/plugins/appy-pie-connect-for-woocommerce/", "source": "security@wordfence.com"}, {"url": "https://www.wordfence.com/threat-intel/vulnerabilities/id/36fb5b8d-1ea4-45c2-8639-b229efdb57db?source=cve", "source": "security@wordfence.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "security@wordfence.com", "description": [{"lang": "en", "value": "CWE-620"}]}], "descriptions": [{"lang": "en", "value": "The Appy Pie Connect for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization within the reset_user_password() REST handler in all versions up to, and including, 1.1.2. This makes it possible for unauthenticated attackers to to reset the password of arbitrary users, including administrators, thereby gaining administrative access."}, {"lang": "es", "value": "El plugin Appy Pie Connect para WooCommerce para WordPress es vulnerable a la escalada de privilegios debido a la falta de autorizaci\u00f3n dentro del gestor REST reset_user_password() en todas las versiones hasta la 1.1.2, ambas inclusive. Esto hace posible que atacantes no autenticados restablezcan la contrase\u00f1a de usuarios arbitrarios, incluyendo administradores, obteniendo as\u00ed acceso administrativo."}], "lastModified": "2026-10-12T15:10:00.207", "sourceIdentifier": "security@wordfence.com"}