What is CVE-2025-4473?

CVE-2025-4473 is a high-severity vulnerability in Vinoth06 Frontend Dashboard, classified under Improper Authorization. CVSS score: 8.8/10. Published 2025-05-13.

How severe is CVE-2025-4473?

High severity. CVSS v3 base score is 8.8 out of 10.

Auth bypass in Vinoth06 Frontend Dashboard

CVE-2025-4473

The Frontend Dashboard plugin for WordPress is vulnerable to Privilege Escalation due to a missing capability check on the ajax_request() function in versions 1.0 to 2.2.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to control where the plugin sends outgoing emails. By pointing SMTP to their own server, attackers could capture password reset emails intended for administrators, and elevate their privileges for full site takeover.

EPSS: 0.004 (32.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.8 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H.

Affected products

Vinoth06 Frontend Dashboard — versions 1.5.10

Weakness classification (CWE)

CWE-285 — Improper Authorization

References

Frequently asked questions

What is CVE-2025-4473?: CVE-2025-4473 is a high-severity vulnerability in Vinoth06 Frontend Dashboard, classified under Improper Authorization. CVSS score: 8.8/10. Published 2025-05-13.
How severe is CVE-2025-4473?: High severity. CVSS v3 base score is 8.8 out of 10.