BeyondCart Connector - Information Disclosure (CVE-2025-8570)
Description
The BeyondCart Connector plugin for WordPress is vulnerable to Privilege Escalation due to improper JWT secret management and authorization within the determine_current_user filter in versions 1.4.2 through 2.1.0. This makes it possible for unauthenticated attackers to craft valid tokens and assume any user’s identity.
psychologyCrowdSec Analysis
CVE-2025-8570 is a critical privilege escalation vulnerability in the BeyondCart Connector plugin for WordPress, stemming from improper JWT secret management and authorization flaws in versions 1.4.2 through 2.1.0. This vulnerability allows unauthenticated attackers to forge valid tokens and impersonate any user, potentially leading to full site compromise and unauthorized access to sensitive data.
CrowdSec has been tracking this vulnerability and its exploits since 12th of September 2025.
CrowdSec has not observed any significant exploitation activity targeting CVE-2025-8570 across its network. As a result, no community-driven trend analysis is available for this vulnerability at this time.
Attackers exploit the /wp-json/grind-mobile-app/v1/customers/1 REST API endpoint by sending crafted PUT requests with a forged or generated JWT in the Authorization header, allowing unauthorized modification of user account details.
Full Intelligence Available
Connect your API key to access CrowdSec scores, exploit timelines, and attacker IPs.
| Event | Date |
|---|---|
| CVE Published | 2025-09-11 |
| Rule Released | 2025-09-12 |