The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_theme_option

WORDPRESS

06-06-2025 03:20

CVE-2025-1778 Vulnerabilidad documentada

4.3 MEDIUM

Tags

#wordpress

#attackers

#authenticated

#vulnerable

#attack

#access

#unauthorized

Descripción

The Art Theme for WordPress is vulnerable to unauthorized access due a missing capability check on the 'arttheme_theme_option_restore' AJAX function in all versions up to, and including, 3.12.2.3. This makes it possible authenticated attackers, with subscriber-level above, delete theme option.

https://themeforest.net/item/art-simple-clean-wordpress-theme-for-creatives/20170299

https://www.wordfence.com/threat-intel/vulnerabilities/id/c54c1fab-634d-4d1a-8234-8f1ae41c7cd4?source=cve

Referencia

Link externo

Ver detalles

Fuente

https://nvd.nist.gov/vuln/detail/CVE-2025-1778

Resultados similares

Coincidentes en almenos en 50% de los tags

06-06-2025 CVE-2025-5733
The Modern Events Calendar Lite plugin for WordPress is vulnerable to Full Path Disclosure in a...
Ver información

06-06-2025 CVE-2025-5760
The Simple History plugin for WordPress is vulnerable to sensitive data exposure via Detective ...
Ver información