CVE-2025-8446
BaseFortify
Publication date: 2025-09-16
Last updated on: 2025-09-16
Assigner: Wordfence
Description
Description
CVSS Scores
EPSS Scores
| Probability: | |
| Percentile: |
Meta Information
Affected Vendors & Products
| Vendor | Product | Version / Range |
|---|---|---|
| blazethemes | blaze_demo_importer | 1.1.1 |
| blazethemes | blaze_demo_importer | 1.0.12 |
| blazethemes | blaze_demo_importer | 1.0.13 |
Helpful Resources
Exploitability
| CWE ID | Description |
|---|---|
| CWE-862 | The product does not perform an authorization check when an actor attempts to access a resource or perform an action. |
Attack-Flow Graph
AI Powered Q&A
Can you explain this vulnerability to me?
This vulnerability exists in the Blaze Demo Importer WordPress plugin (versions up to 1.0.12) where a missing capability check on the 'blaze_demo_importer_install_plugin' function allows authenticated users with Subscriber-level access or higher to install and activate certain plugins without proper authorization. Exploitation requires that the News Kit Elementor Addons plugin and a BlazeThemes theme are installed and activated. Essentially, this flaw lets low-privileged users perform limited plugin installations and activations that should normally be restricted. [1, 2]
How can this vulnerability impact me? :
The vulnerability allows attackers with minimal authenticated access (Subscriber-level or above) to install and activate specific plugins on the WordPress site without proper permissions. This can lead to unauthorized changes to the site's functionality, potential introduction of malicious plugins, or other security risks stemming from unauthorized plugin installations. Although the impact is limited to certain plugins and requires specific conditions, it still poses a risk of unauthorized site modifications. [1, 2]
How can this vulnerability be detected on my network or system? Can you suggest some commands?
To detect this vulnerability on your system, you can check if the Blaze Demo Importer plugin is installed with a version up to 1.0.12. Additionally, monitoring AJAX requests to the plugin's endpoints such as 'blaze_demo_importer_install_plugin' for unauthorized access attempts can help. Since the vulnerability allows authenticated users with Subscriber-level access to install plugins without proper capability checks, you can audit user roles and plugin versions. Specific commands are not provided in the resources, but you can use WordPress CLI commands like 'wp plugin list' to check plugin versions and review user roles. Also, inspecting AJAX request logs for calls to the vulnerable functions without proper permissions may help detect exploitation attempts. [1, 2]
What immediate steps should I take to mitigate this vulnerability?
The immediate step to mitigate this vulnerability is to update the Blaze Demo Importer plugin to version 1.0.13 or later, which includes added user capability checks on all AJAX functions to prevent unauthorized plugin installation and activation. This update enforces permission checks such as 'install_plugins' and 'activate_plugins' capabilities and verifies AJAX request nonces to block unauthorized access. Additionally, ensure that only trusted users have Subscriber-level or higher access, and monitor plugin installations and activations for suspicious activity. [1]