CVE-2025-6742
Last modified
CVE-2025-6742 is a high-severity vulnerability rated 7.5/10 on the CVSS scale. The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.3 via the use of file_exists() in the delete_entry_files() function without restriction on the path provided. This makes it possible for unauthenticated attackers to inject a PHP Object. EPSS estimates a 0.46% chance of exploitation in the next 30 days.
Description
The SureForms – Drag and Drop Form Builder for WordPress plugin for WordPress is vulnerable to PHP Object Injection in all versions up to, and including, 1.7.3 via the use of file_exists() in the delete_entry_files() function without restriction on the path provided. This makes it possible for unauthenticated attackers to inject a PHP Object. No known POP chain is present in the vulnerable software, which means this vulnerability has no impact unless another plugin or theme containing a POP chain is installed on the site. If a POP chain is present via an additional plugin or theme installed on the target system, it may allow the attacker to perform actions like delete arbitrary files, retrieve sensitive data, or execute code depending on the POP chain present.
Metrics
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Brainstormforce | Sureforms | >= 0.0.2, < 0.0.14 |
| Brainstormforce | Sureforms | >= 1.0.0, < 1.0.7 |
| Brainstormforce | Sureforms | >= 1.1.0, < 1.1.2 |
| Brainstormforce | Sureforms | >= 1.2.0, < 1.2.5 |
| Brainstormforce | Sureforms | >= 1.3.0, < 1.3.2 |
| Brainstormforce | Sureforms | >= 1.4.0, < 1.4.5 |
| Brainstormforce | Sureforms | >= 1.6.0, < 1.6.5 |
| Brainstormforce | Sureforms | >= 1.7.0, < 1.7.4 |
| Brainstormforce | Sureforms | 1.5.0 |
References
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2025-6742?
How severe is CVE-2025-6742?
How do I fix CVE-2025-6742?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2025
- CVE-2025-67406https://www.sourcecodester.com Advocate office management sy…7.3
- CVE-2025-67407Sourcecodester CASAP Automated Enrollment System 1.0 is vuln…7.3
- CVE-2025-67408Sourcecodester CASAP Automated Enrollment System 1.0 is vuln…7.3
- CVE-2025-6741Improper access control in secure message component in Devol…7.7
- CVE-2025-67418ClipBucket 5.5.2 is affected by an improper access control i…9.8
- CVE-2025-67419A Denial of Service (DoS) vulnerability in evershop 2.1.0 an…7.5
- CVE-2025-67427A Blind Server-Side Request Forgery (SSRF) vulnerability in …6.5
- CVE-2025-6743The Woodmart theme for WordPress is vulnerable to Stored Cro…5.4
- CVE-2025-67432A stack overflow in the ZBarcode_Encode function of Monkeybr…7.5
- CVE-2025-67433A heap buffer overflow in the processRequest function of Ope…7.5
- CVE-2025-67436Authenticated Remote Code Execution (RCE) in PluXml CMS 5.8.…6.5
- CVE-2025-67437Medical Management System a81df1ce700a9662cb136b27af47f4cbde…6.5
Are you affected by CVE-2025-6742?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST