Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

1 record

Vendor: Cridio Studio Clear all filters
TI-2025-09800 CVE-2025-10706 · GHSA-3m5v-mwj4-jp69

Classified Pro <= 1.0.14 - Missing Authorization to Authenticated (Subscriber+) Arbitrary Plugin Installation

Priority MEDIUM 41

The Classified Pro theme for WordPress is vulnerable to unauthorized plugin installation due to a missing capability check in the 'cwp_addons_update_plugin_cb' function in all versions up to, and including, 1.0.14.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00655 Published 2025-10-16 No fix listed CWE-862