CVE-2025-2266
CRITICALCheckout Mestres do WP for WooCommerce <8.7.5 - Privilege Escalation
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-2266. PoCs published by iSee857, Nxploited, Boshe99.
AI-analyzed exploit summary The repository contains functional exploit code for CVE-2025-2266, demonstrating a command execution vulnerability in OpenCode. The PoC sends a crafted request to create a session and execute commands via the shell endpoint.
Description
The Checkout Mestres do WP for WooCommerce plugin for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the cwmpUpdateOptions() function in versions 8.6.5 to 8.7.5. This makes it possible for unauthenticated attackers to update arbitrary options on the WordPress site. This can be leveraged to update the default role for registration to administrator and enable user registration for attackers to gain administrative user access to a vulnerable site.
Exploits (3)
The repository contains functional exploit code for CVE-2025-2266, demonstrating a command execution vulnerability in OpenCode. The PoC sends a crafted request to create a session and execute commands via the shell endpoint.
This Python script exploits an unauthenticated arbitrary options update vulnerability in the Checkout Mestres do WP for WooCommerce plugin (CVE-2025-2266) to enable user registration and set the default role to administrator, allowing an attacker to create a new admin user.
The repository contains functional exploit code for CVE-2025-2266, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the vulnerability by uploading a shell file to a vulnerable endpoint.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H