Data Modification Vulnerability in WP Social Ninja Plugin for WordPress

CVE-2025-13880

What is CVE-2025-13880?

The WP Social Ninja plugin for WordPress is susceptible to unauthorized access and manipulation of sensitive configurations due to inadequate capability verification in its getAdvanceSettings and saveAdvanceSettings methods. This weakness, present in all versions up to and including 4.0.1, can be exploited by unauthenticated threat actors, allowing them to both view and alter the plugin's advanced settings. This poses significant security risks, making it essential for users to secure their installations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References