Medium severity4.3NVD Advisory· Published Nov 21, 2025· Updated Apr 15, 2026
CVE-2025-11773
CVE-2025-11773
Description
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveDeployedContract' function in all versions up to, and including, 2.4.7. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the WordPress option tokenico_deployed_contracts, poisoning the smart contract addresses displayed.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Range: <=2.4.7
Patches
Vulnerability mechanics
References
3News mentions
0No linked articles in our index yet.