Unauthorized Data Modification in TokenICO WordPress Plugin

CVE-2025-11773

What is CVE-2025-11773?

The TokenICO Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop plugin for WordPress is exposed to a significant security flaw due to the absence of necessary capability checks in the 'saveDeployedContract' function. This vulnerability affects all versions up to and including 2.4.6. Authenticated users with Subscriber-level access or higher can exploit this vulnerability, allowing them to overwrite critical WordPress options such as tokenico_deployed_contracts. This could potentially compromise the smart contract addresses displayed, leading to severe implications for users relying on accurate data.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References