CVE-2025-4473: Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajaxrequest() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-4473?
CVE-2025-4473 has a medium severity level due to the potential for privilege escalation.
How do I fix CVE-2025-4473?
To fix CVE-2025-4473, update the Frontend Dashboard plugin to version 2.2.8 or later.
Who is affected by CVE-2025-4473?
CVE-2025-4473 affects authenticated users with Subscriber-level access and above using versions 1.0 to 2.2.7 of the Frontend Dashboard plugin.
What does CVE-2025-4473 exploit?
CVE-2025-4473 exploits a missing capability check in the ajax_request() function of the Frontend Dashboard plugin.
Can CVE-2025-4473 lead to data exposure?
Yes, CVE-2025-4473 can potentially lead to unauthorized access to user data due to privilege escalation.