CVE-2025-7695

The Dataverse Integration plugin for WordPress is vulnerable to Privilege Escalation due to missing authorization checks within its reset_password_link REST endpoint in versions 2.77 through 2.81. The endpoint’s handler accepts a client-supplied id, email, or login, looks up that user, and calls get_password_reset_key() unconditionally. Because it only checks that the caller is authenticated, and not that they own or may edit the target account, any authenticated attacker, with Subscriber-level access and above, can obtain a password reset link for an administrator and hijack that account.

• CWE-862

• https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/AuthenticatedEndpoint.php
• https://plugins.trac.wordpress.org/browser/integration-cds/trunk/src/API/Endpoints/GetResetUserPasswordLink.php
• https://plugins.trac.wordpress.org/changeset?new=3329717%40integration-cds%2Ftrunk&old=3323579%40integration-cds%2Ftrunk
• https://wordpress.org/plugins/integration-cds/#developers
• https://www.wordfence.com/threat-intel/vulnerabilities/id/cfd35a3c-7203-4832-8b0d-56f3e7983118?source=cve

Published

Jul 24, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-7689The Hydra Booking plugin for WordPress is vulnerable to Priv…8.8
• CVE-2025-7690The Affiliate Plus plugin for WordPress is vulnerable to Cro…6.1
• CVE-2025-7691A privilege escalation issue has been discovered in GitLab E…8.8
• CVE-2025-7692The Orion Login with SMS plugin for WordPress is vulnerable …8.1
• CVE-2025-7693A security issue exists due to improper handling of malforme…9.3
• CVE-2025-7694The Woffice Core plugin for WordPress is vulnerable to arbit…7.5
• CVE-2025-7696The Integration for Pipedrive and Contact Form 7, WPForms, E…9.8
• CVE-2025-7697The Integration for Google Sheets and Contact Form 7, WPForm…9.8
• CVE-2025-7698Out-of-bounds read vulnerabilities in print processing of Ge…5.9
• CVE-2025-7699An improper access control vulnerability was found in the E…7.1
• CVE-2025-7700A flaw was found in FFmpeg’s ALS audio decoder, where it doe…5.3
• CVE-2025-7702URL Redirection to Untrusted Site ('Open Redirect') vulnerab…4.7