Privilege Escalation Vulnerability in WP Foodbakery Plugin for WordPress

CVE-2025-0181

What is CVE-2025-0181?

The WP Foodbakery plugin for WordPress is susceptible to privilege escalation due to insufficient validation of user identities prior to setting the current user and their authentication cookie. This vulnerability enables unauthenticated attackers to exploit the flaw and gain unauthorized access to targeted user accounts, such as those of administrators, thereby compromising the security of the entire WordPress site.

References