CVE-2025-3810: WPBookit <= 1.0.2 - Insecure Direct Object Reference to Unauthenticated Privilege Escalation via Account Takeover
The WPBookit plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.2. This is due to the plugin not properly validating a user's identity prior to updating their details like password and email through the editprofiledata() function. This makes it possible for unauthenticated attackers to change arbitrary user's email addresses and passwords, including administrators, and leverage that to gain access to their account.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of CVE-2025-3810?
CVE-2025-3810 has a high severity due to its potential for privilege escalation via account takeover.
How do I fix CVE-2025-3810?
To fix CVE-2025-3810, you should update the WPBookit plugin to version 1.0.3 or later.
What versions of WPBookit are affected by CVE-2025-3810?
CVE-2025-3810 affects all versions of the WPBookit plugin up to and including version 1.0.2.
What is the impact of CVE-2025-3810?
The impact of CVE-2025-3810 is that an attacker could escalate privileges by taking over user accounts without proper validation.
Is there a recommended action for users of WPBookit regarding CVE-2025-3810?
Users of WPBookit should immediately update to the latest version to mitigate the risk associated with CVE-2025-3810.