CVE-2025-5953

The WP Human Resource Management plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization in the ajax_insert_employee() and update_empoyee() functions in versions 2.0.0 through 2.2.17. The AJAX handler reads the client-supplied $_POST['role'] and, after basic cleaning via hrm_clean(), passes it directly to wp_insert_user() and later to $user->set_role() without verifying that the current user is allowed to assign that role. This makes it possible for authenticated attackers, with Employee-level access and above, to elevate their privileges to administrator.

• CWE-862

• https://plugins.trac.wordpress.org/browser/hrm/tags/2.2.17/class/employee.php#L543Product
• https://plugins.trac.wordpress.org/browser/hrm/tags/2.2.17/class/employee.php#L591Product
• https://plugins.trac.wordpress.org/browser/hrm/tags/2.2.17/class/employee.php#L89Product
• https://wordpress.org/plugins/hrm/#developersRelease Notes
• https://www.wordfence.com/threat-intel/vulnerabilities/id/3ba33a18-429f-4a3e-b018-bdfbbe6e8482?source=cveThird Party Advisory

Published

Jul 4, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-59524Horilla is a free and open source Human Resource Management …6.1
• CVE-2025-59525Horilla is a free and open source Human Resource Management …6.1
• CVE-2025-59526mailgen is a Node.js package that generates responsive HTML …2.7
• CVE-2025-59527Flowise is a drag & drop user interface to build a customize…7.5
• CVE-2025-59528Flowise is a drag & drop user interface to build a customize…10
• CVE-2025-59529Avahi is a system which facilitates service discovery on a l…5.5
• CVE-2025-59530quic-go is an implementation of the QUIC protocol in Go. In …7.5
• CVE-2025-59531Argo CD is a declarative, GitOps continuous delivery tool fo…7.5
• CVE-2025-59532Codex CLI is a coding agent from OpenAI that runs locally. I…8.6
• CVE-2025-59534CryptoLib provides a software-only solution using the CCSDS …7.8
• CVE-2025-59535DNN (formerly DotNetNuke) is an open-source web content mana…6.5
• CVE-2025-59536Claude Code is an agentic coding tool. Versions before 1.0.1…8.8