CVE-2025-59005
BaseFortify
Publication date: 2025-09-09
Last updated on: 2026-04-23
Assigner: Patchstack
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| frenify | categorify | 1.0.7.5 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability is a Broken Access Control issue in the WordPress Categorify plugin (up to version 1.0.7.5). It is caused by missing authorization, authentication, or nonce token checks in certain functions, which may allow users with low privileges (Subscriber-level) to perform actions that should be restricted to higher-privileged users. The vulnerability is classified under OWASP Top 10 category A1: Broken Access Control and has a low severity score of 4.3. [1]
How can this vulnerability impact me? :
This vulnerability can allow unprivileged users to perform actions reserved for higher-privileged users, potentially leading to unauthorized changes or misuse within the WordPress site. Although exploitation is considered unlikely due to its low severity, the risk remains because the plugin is likely abandoned with no official fix available. Deactivating the plugin alone does not fully mitigate the threat without applying a virtual patch or replacing the plugin. [1]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
Detection of this vulnerability involves identifying if the WordPress site is running the Categorify plugin version 1.0.7.5 or earlier, which is known to have missing authorization checks. Since the vulnerability allows Subscriber-level users to perform higher-privileged actions, monitoring for unusual privilege escalations or unauthorized actions by low-privileged users can help detect exploitation attempts. Specific commands are not provided, but checking the plugin version via WordPress admin or using WP-CLI commands such as 'wp plugin list' to verify the installed version can be useful. Additionally, reviewing access logs for suspicious activity related to Categorify plugin endpoints may assist in detection. [1]
What immediate steps should I take to mitigate this vulnerability?
Immediate mitigation steps include urgently replacing the Categorify plugin with an alternative plugin, as no official patch or update is available. Applying a virtual patch (vPatch) provided by Patchstack can offer automatic protection against exploitation. Simply deactivating the plugin is insufficient to eliminate the threat. Therefore, users should either apply the virtual patch or remove and replace the plugin to mitigate the risk. [1]