CVE-2025-4473: Frontend Dashboard 1.5.10 - 2.2.7 - Missing Authorization to Authenticated (Subscriber+) Account Takeover/Privilege Escalation via ajax_request Function
First published: Tue May 13 2025(Updated: )
The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover.
Credit: security@wordfence.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Frontend Dashboard | >=1.0<=2.2.7 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://www.wordfence.com/threat-intel/vulnerabilities/id/2f3a10b5-b024-4b3f-af67-b7fcb997d368?source=cve
- https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/route/class-fed-request.php#L35
- https://wordpress.org/plugins/frontend-dashboard/#developers
- https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/function-admin.php#L3055
- https://plugins.trac.wordpress.org/browser/frontend-dashboard/tags/2.2.7/includes/admin/layout/settings_tab/email/class-fed-email.php#L122
- https://plugins.trac.wordpress.org/changeset/3290623/
Frequently Asked Questions
What is the severity of CVE-2025-4473?
CVE-2025-4473 has a medium severity level due to the potential for privilege escalation.
How do I fix CVE-2025-4473?
To fix CVE-2025-4473, update the Frontend Dashboard plugin to version 2.2.8 or later.
Who is affected by CVE-2025-4473?
CVE-2025-4473 affects authenticated users with Subscriber-level access and above using versions 1.0 to 2.2.7 of the Frontend Dashboard plugin.
What does CVE-2025-4473 exploit?
CVE-2025-4473 exploits a missing capability check in the ajax_request() function of the Frontend Dashboard plugin.
Can CVE-2025-4473 lead to data exposure?
Yes, CVE-2025-4473 can potentially lead to unauthorized access to user data due to privilege escalation.
- collector/mitre-cve
- source/MITRE
- agent/references
- agent/weakness
- agent/title
- agent/type
- agent/first-publish-date
- agent/description
- agent/guess-ai
- agent/software-canonical-lookup
- agent/softwarecombine
- collector/nvd-api
- source/NVD
- agent/last-modified-date
- agent/author
- agent/severity
- agent/event
- collector/epss-latest
- source/FIRST
- agent/source
- agent/tags
- agent/epss
- vendor/frontend dashboard
- canonical/frontend dashboard