CVE-2025-0515
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 18, 2025
CWE ID 862
Summary
CVE-2025-0515 is a vulnerability affecting the Buzz Club WordPress Theme. The issue lies in the 'cmsmasters_hide_admin_notice' function, which lacks capability checks. This flaw permits authenticated attackers, including those with Subscriber-level access, to modify data unauthorizedly. By manipulating option values, attackers can cause errors and result in a denial of service for legitimate users, or they can set certain values to 'true' for malicious purposes. Versions up to and including 2.0.4 of the theme are impacted.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Vendors
- WordPress