CVE-2025-58854
BaseFortify
Publication date: 2025-09-05
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| wordpress | ultimate_ajax_login | 1.2.1 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-352 | The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Cross-Site Request Forgery (CSRF) issue in the WordPress Ultimate AJAX Login Plugin versions up to 1.2.1. It allows attackers to trick authenticated users, especially those with higher privileges, into executing unwanted actions on the site without their consent. This can lead to compromised site security. The vulnerability also involves Reflected Cross-Site Scripting (XSS). [1]
How can this vulnerability impact me? :
The vulnerability can allow attackers to perform unauthorized actions on your website by exploiting authenticated users, potentially leading to compromised site security. This could include unauthorized changes, data manipulation, or other malicious activities. Since the plugin is abandoned and unpatched, the risk remains unless mitigated by virtual patching or replacing the plugin. Automated attacks may target vulnerable sites indiscriminately. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
There are no specific commands provided to detect this vulnerability on your network or system. It is recommended to use professional incident response or server-side malware scanning in case of compromise, as plugin-based scanners may be tampered with by malware. [1]
What immediate steps should I take to mitigate this vulnerability?
Since there is no official fix or patched version available, immediate mitigation steps include replacing the vulnerable Ultimate AJAX Login plugin with an alternative solution. Simply deactivating the plugin is insufficient unless a virtual patch (vPatch) is applied. Patchstack offers virtual patching as a mitigation strategy that automatically protects against this vulnerability without impacting performance. [1]