CVE-2025-5060

The Bravis User plugin for WordPress is vulnerable to Authentication Bypass in all versions up to, and including, 1.0.1. This is due to the plugin not properly logging a user in with the data that was previously verified through the facebook_ajax_login_callback(). This makes it possible for unauthenticated attackers to log in as administrative users, as long as they have an existing account on the site, and access to the administrative user's email.

• CWE-288

• https://themeforest.net/item/graviton-construction-wordpress-theme/50429299
• https://www.wordfence.com/threat-intel/vulnerabilities/id/c6c52f1a-2203-4abe-b777-064bd6fd1714?source=cve

Published

Aug 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-50584StudentManage v1.0 was discovered to contain a cross-site sc…4.8
• CVE-2025-50585StudentManage v1.0 was discovered to contain a SQL injection…8.8
• CVE-2025-50586StudentManage v1.0 was discovered to contain Cross-Site Requ…6.5
• CVE-2025-5059A vulnerability classified as critical has been found in Cam…7.2
• CVE-2025-50592Cross site scripting vulnerability in seacms before 13.2 via…5.4
• CVE-2025-50594An issue was discovered in /Code/Websites/DanpheEMR/Controll…9.8
• CVE-2025-50608A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-50609A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-5061The WP Import Export Lite plugin for WordPress is vulnerable…8.8
• CVE-2025-50610A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-50611A buffer overflow vulnerability has been discovered in Netis…7.5
• CVE-2025-50612A buffer overflow vulnerability has been discovered in the N…7.5