CVE-2025-4672
Offsprout Page Builder 2.2.1 - 2.15.2 - Authenticated (Contributor+) Privilege Escalation via permission_callback Function
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Offsprout Page Builder 2.2.1 - 2.15.2 - Authenticated (Contributor+) Privilege Escalation via permission_callback Function
The Offsprout Page Builder plugin for WordPress is vulnerable to Privilege Escalation due to improper authorization placed on the permission_callback() function in versions 2.2.1 to 2.15.2. This makes it possible for authenticated attackers, with Contributor-level access and above, to read, create, update or delete any user meta, including flipping their own wp_capabilities to administrator and fully escalate their privileges.
Reserved 2025-05-13 | Published 2025-05-31 | Updated 2025-06-02 | Assigner WordfenceCWE-285 Improper Authorization
| 2025-05-30: | Disclosed |
Kenneth Dunn
www.wordfence.com/...-8d83-43ff-b777-ba8f58321e9e?source=cve
wordpress.org/plugins/offsprout-page-builder/
plugins.trac.wordpress.org/...s-offsprout-api-extensions.php
plugins.trac.wordpress.org/...s-offsprout-api-extensions.php
Support options
