CVE-2025-1295
CVSS 3.1 Score 8.8 of 10 (high)
Details
Published Feb 27, 2025
CWE ID 269
Summary
CVE-2025-1295 is a privilege escalation vulnerability affecting the Templines Elementor Helper Core plugin for WordPress. This issue allows authenticated attackers with Subscriber-level access or higher to update their user role to Administrator, given that the BuddyPress plugin is also installed and activated. The vulnerability stems from the plugin's acceptance of arbitrary user meta updates, making it an exploitable weakness for attackers seeking to escalate their privileges within a WordPress environment.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.