CVE-2025-7689
BaseFortify
Publication date: 2025-07-29
Last updated on: 2025-07-29
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordpress | hydra_booking | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
The vulnerability in the Hydra Booking WordPress plugin allows authenticated users with Subscriber-level access or higher to reset the password of an Administrator user due to a missing capability check in the tfhb_reset_password_callback() function. This means an attacker with low-level access can escalate their privileges to full administrator rights by resetting admin passwords.
How can this vulnerability impact me? :
This vulnerability can lead to full privilege escalation, allowing an attacker with minimal access to take over an Administrator account. This compromises the security and control of the WordPress site, potentially leading to unauthorized changes, data breaches, or complete site takeover.
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection can involve checking the installed version of the Hydra Booking plugin on your WordPress site to see if it is between versions 1.1.0 and 1.1.18, which are vulnerable. You can do this by running a command to list installed plugins and their versions, such as: wp plugin list | grep hydra-booking. Additionally, monitoring for unusual password reset activity initiated by Subscriber-level users could indicate exploitation attempts. However, no specific detection commands or network signatures are provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
The immediate mitigation step is to update the Hydra Booking plugin to version 1.1.19 or later, where the vulnerability has been fixed. Until the update is applied, restrict Subscriber-level user permissions if possible, and monitor for suspicious password reset activities. Applying the latest security patch from the plugin developers is the recommended action. [1]