CVE-2025-11895

The Binary MLM Plan plugin for WordPress is vulnerable to insecure direct object reference in versions up to, and including, 5.0. This is due to the bmp_user_payout_detail_of_current_user() function selecting payout records solely by id without verifying ownership. This makes it possible for authenticated attackers with the bmp_user role (often subscribers) to view other members' payout summaries via direct requests to the /bmp-account-detail/ endpoint with a crafted payout-id parameter granted they can access the shortcode output.

• CWE-639

• https://plugins.trac.wordpress.org/browser/binary-mlm-plan/trunk/includes/bmp-hook-functions.php#L833
• https://www.wordfence.com/threat-intel/vulnerabilities/id/adba7d0c-29ca-49c5-ac75-bb79d62f6107?source=cve

Published

Oct 17, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-1189A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-11890The Crypto Payment Gateway with Payeer for WooCommerce plugi…7.5
• CVE-2025-11891The Shelf Planner plugin for WordPress is vulnerable to Sens…5.3
• CVE-2025-11892An improper neutralization of input vulnerability was identi…9.6
• CVE-2025-11893The Charitable – Donation Plugin for WordPress – Fundraising…6.5
• CVE-2025-11894The Shelf Planner plugin for WordPress is vulnerable to unau…5.3
• CVE-2025-11896In Xpdf 4.05 (and earlier), a PDF object loop in a CMap, via…2.1
• CVE-2025-11897The The7 — Website and eCommerce Builder for WordPress theme…6.4
• CVE-2025-11898Agentflow developed by Flowring has an Arbitrary File Readin…8.7
• CVE-2025-11899Agentflow developed by Flowring has an Use of Hard-coded Cry…9.2
• CVE-2025-1190A vulnerability has been found in code-projects Job Recruitm…6.1
• CVE-2025-11900The iSherlock developed by HGiga has an OS Command Injection…9.8