The Platform theme for WordPress is vulnerable to unauthorized modification of data that can lead to privilege escalation due to a missing capability check on the *_ajax_save_options() function in all versions up to 1.4.…
CVSS 3.1CRITICAL 9.8·Network·No auth·No interaction·EPSS 0.03063·Published 2025-07-25·Fixed in 1.4.4CWE-862