Approved changes feed: RSS · Atom

cpe:2.3:a:cosmwasm:cosmwasm:*:*:*:*:*:wordpress:*:*

part: a version: * update: *

VendorCosmwasm (077f0c6e-cdd3-5007-82b0-869b78a13034)
ProductCosmwasm (42da73b2-b2f4-5f3a-8c80-87e4406f39ce)
Edition*
Language*
Software edition*
Target softwarewordpress
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-25500 vulnerable 2026-06-08 07:12:51.199091 Details available
An issue in CosmWasm prior to v2.2.0 allows attackers to bypass capability restrictions in blockchains by exploiting a lack of runtime capability validation. This allows attackers to deploy a contract without capability enforcement, and execute unauthorized actions on the blockchain.
Published: 2025-03-18T00:00:00.000Z
Updated: 2025-03-21T16:21:14.200Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.