CVE-2025-11171

The Chartify – WordPress Chart Plugin for WordPress is vulnerable to Missing Authentication for Critical Function in all versions up to, and including, 3.5.9. This is due to the plugin registering an unauthenticated AJAX action that dispatches to admin-class methods based on a request parameter, without any nonce or capability checks. This makes it possible for unauthenticated attackers to execute administrative functions via the wp-admin/admin-ajax.php endpoint granted they can identify callable method names.

• CWE-306

• https://plugins.trac.wordpress.org/browser/chart-builder/tags/3.5.8/admin/class-chart-builder-admin.php#L1625
• https://plugins.trac.wordpress.org/browser/chart-builder/tags/3.5.8/admin/class-chart-builder-admin.php#L675
• https://plugins.trac.wordpress.org/browser/chart-builder/tags/3.5.8/includes/class-chart-builder.php#L247
• https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=3372188%40chart-builder%2Ftags%2F3.6.0&new=3372188%40chart-builder%2Ftags%2F3.6.0
• https://www.wordfence.com/threat-intel/vulnerabilities/id/aa3e030b-8ef1-4dbc-940d-6c2ab2683620?source=cve

Published

Oct 8, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11165A sandbox escape vulnerability exists in dotCMS’s Velocity s…9.9
• CVE-2025-11166The WP Go Maps (formerly WP Google Maps) plugin for WordPres…5.4
• CVE-2025-11167The CM Registration – Tailored tool for seamless login and i…4.7
• CVE-2025-11168The Mementor Core plugin for WordPress is vulnerable to Priv…8.8
• CVE-2025-1117A vulnerability, which was classified as critical, was found…7.3
• CVE-2025-11170The WP移行専用プラグイン for CPI plugin for WordPress is vulnerable t…9.8
• CVE-2025-11172The Check Plagiarism plugin for WordPress is vulnerable to u…4.3
• CVE-2025-11173Vulnerability in Wikimedia Foundation OATHAuth. This vulnera…0
• CVE-2025-11174The Document Library Lite plugin for WordPress is vulnerable…5.3
• CVE-2025-11175Improper Neutralization of Special Elements used in an Expre…8.8
• CVE-2025-11176The Quick Featured Images plugin for WordPress is vulnerable…4.3
• CVE-2025-11177The External Login plugin for WordPress is vulnerable to SQL…7.5