WordPress Plugin Vulnerabilities

Widget Options < 4.0.9 - Missing Authorization to Notice Dismissal

Description

The Widget Options plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the widgetopts_ajax_hide_rating() function in versions up to, and including, 4.0.8. This makes it possible for authenticated attackers, with subscriber-level access and above, to dismiss a ratings notice.

Affects Plugins

Plugin icon
widget-options
Fixed in 4.0.9

References

CVE
CVE-2025-22722
URL
https://www.wordfence.com/threat-intel/vulnerabilities/id/e0b571c8-d414-4566-a24c-e70fd1740256

Classification

Type
NO AUTHORISATION
OWASP top 10
A5: Broken Access Control
CWE
CWE-862
CVSS
4.3 (medium)

Miscellaneous

Original Researcher
Trương Hữu Phúc (truonghuuphuc)
Verified
No
WPVDB ID
f0ac062d-ec7c-4021-8814-097e4503ac55

Timeline

Publicly Published
2025-01-15 (about 1 year ago)
Added
2025-01-21 (about 1 year ago)
Last Updated
2025-01-21 (about 1 year ago)

Other

Published
Title
Published
2025-04-02
Title
WP Video Playlist <= 1.1.2 - Missing Authorization to Unauthenticated Settings Update
Published
2025-08-14
Title
WooCommerce OTP Login With Phone Number, OTP Verification < 1.8.48 - Authentication Bypass
Published
2025-10-17
Title
Kognetiks Chatbot < 2.3.6 - Unauthenticated Limited File Uploads and Conversation Erasing
Published
2025-06-05
Title
WP Email Debug 1.0 - 1.1.0 - Missing Authorization to Unauthenticated Privilege Escalation via Password Reset
Published
2025-07-03
Title
WP Human Resource Management 2.0.0 - 2.2.17 - Missing Authorization to Authenticated (Employee+) Arbitrary User Deletion via ajax_delete_employee Function