Question: What is CVE-2025-0180?
Answer: CVE-2025-0180 is a vulnerability classified as critical with a CVSS score of 9.8. It falls under CWE-269 and affects the system as follows: The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 3.3. This is due to the plugin not properly restricting what user meta can be updated during profile registration. This makes it possible for unauthenticated attackers to register on the site as an administrator.