CVE-2025-24725
CVSS 3.1 Score 4.3 of 10 (medium)
Details
Published Jan 24, 2025
CWE ID 862
Summary
CVE-2025-24725 is a critical Missing Authorization vulnerability that affects the ThimPress Thim Elementor Kit. This issue arises due to incorrectly configured access control security levels, enabling unauthorized access for potential attackers. The vulnerability allows exploitation of the Thim Elementor Kit in versions from n/a to 1.2.8. Successful exploitation could lead to serious security implications, highlighting the importance of promptly addressing this issue by updating to the latest, secure version of the software.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Thim Elementor Kit Plugin
Affected Vendors
- ThimPress