CVE-2025-1435 is a CSRF vulnerability in the bbPress plugin for WordPress affecting all versions up to and including 2.6.11. The vulnerability arises from missing or incorrect nonce validation in the bbp_user_add_role_on_register() function, enabling attackers to elevate privileges to the Keymaster role by exploiting an administrator's interaction with a crafted request. Instead of adding nonce validation, the plugin authors mitigated the issue by disabling role selection during user registration.

An attacker can exploit this vulnerability to escalate privileges to the bbPress Keymaster role by tricking an administrator into clicking a malicious link, potentially leading to limited confidentiality, integrity, and availability impacts within the bbPress forum environment. The CVSS 3.1 base score is 6.3 (medium severity), reflecting network attack vector, low attack complexity, no privileges required, user interaction required, and impacts on confidentiality, integrity, and availability.

No official patch is currently available for this vulnerability. The plugin author mitigated the issue by removing the ability to select a user role during registration, which prevents exploitation of this CSRF vector. Users should update to the latest bbPress version where this mitigation is applied. Monitor the vendor's advisory for any future official fixes or patches.