Privilege Escalation Vulnerability in Social Streams Plugin for WordPress

CVE-2025-7722

What is CVE-2025-7722?

The Social Streams plugin for WordPress contains a significant vulnerability that allows authenticated users with Subscriber access and above to escalate their privileges. This issue arises from the plugin's failure to adequately verify a user's identity before updating their associated metadata in the update_user_meta() function. As a result, attackers can exploit this flaw to modify their user roles, potentially granting them administrative capabilities.

References