Unauthorized Data Modification in WP Wallcreeper Plugin for WordPress

CVE-2025-7822

What is CVE-2025-7822?

The WP Wallcreeper plugin for WordPress is susceptible to unauthorized data modifications. This issue arises from a lack of adequate capability checks on the admin_notices hook, allowing authenticated users with Subscriber-level permissions and higher to alter caching settings. This vulnerability impacts all versions of the WP Wallcreeper plugin leading up to and including version 1.6.1, posing security risks to WordPress sites utilizing this plugin.

References