CVE-2025-57979
BaseFortify
Publication date: 2025-09-22
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| patchstack | authorsure | * |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-79 | The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Stored Cross-Site Scripting (XSS) issue in the WordPress AuthorSure Plugin (up to version 2.3). It allows an attacker with administrator privileges to inject malicious scripts, such as redirects, advertisements, or other HTML payloads, into the website. These scripts execute when visitors access the site, potentially compromising the site's integrity and user experience. [1]
How can this vulnerability impact me? :
If exploited, this vulnerability can lead to malicious scripts running on your website, which can redirect visitors to harmful sites, display unwanted advertisements, or perform other malicious actions. This can damage your website's reputation, compromise user trust, and potentially lead to further security issues. Since it requires administrator-level access to exploit, the risk is somewhat limited but still significant. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves checking if the WordPress AuthorSure plugin version 2.3 or earlier is installed and active. Since the vulnerability requires administrator-level access to exploit, reviewing plugin versions via WordPress CLI commands can help. For example, use 'wp plugin list' to identify installed plugins and their versions. Additionally, monitoring for unusual script injections or unexpected HTML payloads in web pages served by the site may indicate exploitation attempts. Specific commands to detect malicious scripts depend on the environment but could include searching web server logs or scanning the database for injected scripts. However, no explicit detection commands are provided in the available resources. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include removing and replacing the vulnerable AuthorSure plugin, as no official fix or updated version is available. Deactivating the plugin alone does not eliminate the risk unless a virtual patch (vPatch) is applied. Patchstack recommends using their virtual patching technology to automatically mitigate the vulnerability without requiring an official patch, providing rapid protection. Therefore, either apply Patchstack's virtual patch or remove the plugin and replace it with a supported alternative. [1]