Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2025-5288 — AI Deep Analysis Summary

CVSS 9.8 · Critical

Q1What is this vulnerability? (Essence + Consequences)

🚨 **Essence**: A critical **Privilege Escalation** flaw in the WordPress plugin "REST API | Custom API Generator".…

Q2Root Cause? (CWE/Flaw)

🛡️ **Root Cause**: **CWE-862** (Missing Authorization). <br>🔍 **Flaw**: The `process_handler()` function lacks a **capability check**.…

Q3Who is affected? (Versions/Components)

📦 **Affected Product**: WordPress Plugin: **REST API | Custom API Generator For Cross Platform And Import Export In WP**. <br>🏢 **Vendor**: WebOccults. <br>📅 **Versions**: **1.0.0 to 2.0.3**.

Q4What can hackers do? (Privileges/Data)

👑 **Privileges**: Attackers can escalate to **Administrator** level. <br>📂 **Data Access**: Full read/write access to the WordPress database, users, and content. <br>⚠️ **Impact**: Complete site takeover.

Q5Is exploitation threshold high? (Auth/Config)

⚡ **Threshold**: **Extremely Low**. <br>🔓 **Auth**: **Unauthenticated**. No login required. <br>⚙️ **Config**: Exploits exposed REST API endpoints directly.

Q6Is there a public Exp? (PoC/Wild Exploitation)

💣 **Public Exploit**: **Yes**. <br>🔗 **PoC**: Available on GitHub (Nxploited/CVE-2025-5288). <br>📝 **Method**: Send a crafted `user.json` file to the API endpoint to create an admin user.

Q7How to self-check? (Features/Scanning)

🔍 **Self-Check**: <br>1. Check installed plugins for **"REST API | Custom API Generator"**. <br>2. Verify version is **≤ 2.0.3**. <br>3. Scan for exposed REST API endpoints handling user imports without auth.

Q8Is it fixed officially? (Patch/Mitigation)

🛠️ **Fix**: Update the plugin to the latest version (post-2.0.3). <br>📌 **Reference**: Check WordPress.org plugin page or vendor site for the patched release.

Q9What if no patch? (Workaround)

🚧 **Workaround (No Patch)**: <br>1. **Deactivate/Uninstall** the plugin immediately if not needed. <br>2. Block access to the specific REST API endpoint via `.htaccess` or WAF rules. <br>3.…

Q10Is it urgent? (Priority Suggestion)

🔥 **Urgency**: **CRITICAL (P0)**. <br>⏱️ **Action**: Patch **IMMEDIATELY**. <br>📉 **Risk**: CVSS Score is **High** (AV:N/AC:L/PR:N). Easy to exploit with no auth.…