Question: What is CVE-2025-0181?
Answer: CVE-2025-0181 is a vulnerability classified as critical with a CVSS score of 9.8. It falls under CWE-288 and affects the system as follows: The WP Foodbakery plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 4.7. This is due to the plugin not properly validating a user's identity prior to setting the current user and their authentication cookie. This makes it possible for unauthenticated attackers to gain access to a target user's (e.g. administrators) account.