CVE-2025-10742CRITICAL 9.8EPSS p38.3%

CVE-2025-10742CVE-2025-10742

Description

The Truelysell Core plugin for WordPress is vulnerable to Arbitrary User Password Change in versions up to, and including, 1.8.6. This is due to the plugin providing user-controlled access to objects, letting a user bypass authorization and access system resources. This makes it possible for unauthenticated attackers to change user passwords and potentially take over administrator accounts. Note: This can only be exploited unauthenticated if the attacker knows which page contains the 'truelysell_edit_staff' shortcode.

Scoring

CVSS 3.19.8 (CRITICAL)
VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS0.49% probability of exploitation · percentile 38.3% · 2026-06-18T12:00:27Z
Published2025-10-16
Last modified2026-04-15

Underlying weaknesses· 1

CWE-639

References

  1. https://themeforest.net/item/truelysell-service-booking-wordpress-theme/43398124
  2. https://www.wordfence.com/threat-intel/vulnerabilities/id/a636e865-9556-4afb-8726-4537a160f379?source=cve

1

TypeTargetConfidenceTier
WeaknessAuthorization Bypass Through User-Controlled Keycwe-6390%live

Related by meaning· 6

Nearest entities by semantic similarity across the cs-graph corpus.

CVE
CVE-2025-8572
CVE
CVE-2025-13615
CVE
CVE-2025-14996
CVE
CVE-2025-3852
CVE
CVE-2025-3610
CVE
CVE-2025-14975
Sourced from NVD + FIRST.org EPSS. Curated for EU compliance use cases by Adam Lundqvist, Founder at SQUR.