Live Vulnerability Intelligence
Threat Database
Search CVEs, inspect descriptions, and open detail pages with AI-assisted technical context.
Threat Entry
Updated 2025-11-21
CVE-2025-11771 - Tokenico Cryptocurrency Token Launchpad Presale Ico Ido Airdrop Plugin
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthenticated and unauthorized modification of data due to missing authentication and capability checks on the 'createSaleRecord' function in all versions up to, and including, 2.4.6. This makes it possible for unauthenticated attackers to manipulate presales counters.
PLUGIN
Tokenico Cryptocurrency Token Launchpad Presale Ico Ido Airdrop
CVE-2025-11771
Risk Score
Threat Entry
Updated 2025-11-21
CVE-2025-11773 - Tokenico Cryptocurrency Token Launchpad Presale Ico Ido Airdrop Plugin
The Cryptocurrency (Token), Launchpad (Presale), ICO & IDO, Airdrop by TokenICO plugin for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'saveDeployedContract' function in all versions up to, and including, 2.4.6. This makes it possible for authenticated attackers, with Subscriber-level access and above, to overwrite the WordPress option `tokenico_deployed_contracts`, poisoning the smart contract addresses displayed.
PLUGIN
Tokenico Cryptocurrency Token Launchpad Presale Ico Ido Airdrop
CVE-2025-11773
Risk Score