CVE-2025-4973

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The Workreap plugin for WordPress, used by the Workreap - Freelance Marketplace WordPress Theme, is vulnerable to authentication bypass in all versions up to, and including, 3.3.1. This is due to the plugin not properly verifying a user's identity prior to logging them in when verifying an account with an email address. This makes it possible for unauthenticated attackers to log in as registered users, including administrators, if they know user's email address. This is only exploitable fi the user's confirmation_key has not already been set by the plugin.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-288

Affected software

No affected versions have been published.

Timeline

Published: Jun 12, 2025
Last modified: Jun 17, 2026
NVD status: Analyzed

Related CVEs from 2025

CVE-2025-497307.8Time-of-check time-of-use (toctou) race condition in Microsoft Windows QoS scheduler allows an authorized attacker to elevate privileges loc CVE-2025-497313.1Improper handling of insufficient permissions or privileges in Microsoft Teams allows an authorized attacker to elevate privileges over a ne CVE-2025-497327.8Heap-based buffer overflow in Microsoft Graphics Component allows an authorized attacker to elevate privileges locally.CVE-2025-497337.8Use after free in Windows Win32K - ICOMP allows an authorized attacker to elevate privileges locally.CVE-2025-497347.0Improper restriction of communication channel to intended endpoints in Windows PowerShell allows an authorized attacker to elevate privilege CVE-2025-497358.1Use after free in Windows KDC Proxy Service (KPSSVC) allows an unauthorized attacker to execute code over a network.CVE-2025-497364.3The ui performs the wrong action in Microsoft Edge for Android allows an unauthorized attacker to perform spoofing over a network.CVE-2025-497377.0Concurrent execution using shared resource with improper synchronization ('race condition') in Microsoft Teams allows an authorized attacker CVE-2025-497387.8Improper link resolution before file access ('link following') in Microsoft PC Manager allows an authorized attacker to elevate privileges l CVE-2025-497398.8Improper link resolution before file access ('link following') in Visual Studio allows an unauthorized attacker to elevate privileges over a CVE-2025-497408.8Protection mechanism failure in Windows SmartScreen allows an unauthorized attacker to bypass a security feature over a network.CVE-2025-497417.5No cwe for this issue in Microsoft Edge (Chromium-based) allows an unauthorized attacker to disclose information over a network.