Privilege Escalation Vulnerability in Frontend Dashboard Plugin for WordPress

CVE-2025-4474

What is CVE-2025-4474?

The Frontend Dashboard plugin for WordPress is susceptible to a Privilege Escalation risk due to inadequate capability verification in the fed_admin_setting_form_function(). This flaw affects versions 1.0 through 2.2.7, allowing authenticated users with Subscriber-level access or higher to modify the plugin’s settings. This manipulation can lead to unauthorized changes, enabling the creation of new user accounts that default to the administrator role, thus allowing attackers to gain administrative privileges and access sensitive areas of the WordPress site.

References