A vulnerability was found in Chimpstudio WP Directorybox Manager Plugin up to 2.5 on WordPress. It has been classified as critical. Affected is the function
wp_dp_enquiry_agent_contact_form_submit_callback
. The manipulation leads to authentication bypass using alternate channel.
This vulnerability is traded as CVE-2025-0316. It is possible to launch the attack remotely. There is no exploit available.