Beveiligingsadvies

CVE-2025-1778

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-06-06 05:22:42
Laatst bijgewerkt 2026-04-08 17:20:51
Toegewezen door Wordfence
CVSS-score 4.3
Status PUBLISHED

Beschrijving

The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_theme_option_restore' AJAX function in all versions up to, and including, 3.12.2.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete the theme option.