CVE-2025-4796
HIGHEventin < 4.0.35 - Unauthenticated Privilege Escalation via SpeakerController Email Update
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2025-4796. PoCs published by AnotherSec, Boshe99, Nxploited.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2025-4796, a privilege escalation vulnerability in the Eventin WordPress plugin (<= 4.0.34). The exploit allows authenticated users (contributor+) to change any user's email via an insecure API endpoint, enabling account takeover.
Description
The Eventin plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.0.34. This is due to the plugin not properly validating a user's identity or capability prior to updating their details like email in the 'Eventin\Speaker\Api\SpeakerController::update_item' function. This makes it possible for unauthenticated attackers with contributor-level and above permissions to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
Exploits (3)
This repository contains a functional exploit for CVE-2025-4796, a privilege escalation vulnerability in the Eventin WordPress plugin (<= 4.0.34). The exploit allows authenticated users (contributor+) to change any user's email via an insecure API endpoint, enabling account takeover.
The repository contains functional exploit code for CVE-2025-4796, targeting a WordPress plugin (3DPrint Lite 1.9.1.4) with an arbitrary file upload vulnerability. The Python script demonstrates the exploit by uploading a file to a vulnerable endpoint and confirming its presence.
This is a functional exploit for CVE-2025-4796, targeting a WordPress vulnerability that allows privilege escalation by updating a speaker's email via an authenticated API request. The script automates login, nonce extraction, and payload delivery to escalate a user's privileges to admin.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H