CVE-2025-48325
BaseFortify
Publication date: 2025-08-28
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordpress | wp_admin_theme | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
CVE-2025-48325 is a Cross-Site Request Forgery (CSRF) vulnerability in the WP Admin Theme WordPress plugin (versions up to 1.0) that allows an attacker to trick authenticated users with higher privileges into executing unwanted actions. This can lead to Stored Cross-Site Scripting (XSS), where malicious code is injected and stored on the site, potentially compromising the security of the affected website. [1]
How can this vulnerability impact me? :
This vulnerability can allow attackers to execute malicious scripts in the context of the affected website by exploiting authenticated users with higher privileges. This can lead to unauthorized actions, data theft, session hijacking, or further compromise of the website's integrity and user data. Since the plugin is abandoned and unpatched, the risk remains unless mitigated by virtual patches or removal of the plugin. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability is challenging because plugin-based malware scanners may be unreliable. There are no specific commands provided for detection. It is recommended to monitor for unusual actions performed by authenticated users with higher privileges that could indicate exploitation of the CSRF leading to Stored XSS. Professional incident response services are advised for compromised sites. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include removing and replacing the WP Admin Theme plugin, as it is abandoned and unpatched. Deactivating the plugin alone does not eliminate the risk. Applying a virtual patch (vPatch) from Patchstack is recommended to automatically mitigate the vulnerability. Seeking professional incident response services is advised if compromise is suspected. [1]