PT-2025-22100 · Project · Project

Dave Jong · CVE-2025-39366 · Published 2025-05-19 · Updated 2025-05-19

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: wProject versions prior to 5.8.0

Description: The issue is related to an Incorrect Privilege Assignment vulnerability. This vulnerability affects wProject, with details about the impact or exploitation not specified beyond the general description of the issue.

Recommendations: For versions prior to 5.8.0, update to version 5.8.0 or later to resolve the issue.

Fix

LPE

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-39366

Affected Products

Project

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-39366 · Security Note
• https://patchstack.com/database/Wordpress/Theme/wproject/vulnerability/wordpress-wproject-theme-5-8-0-subscriber-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/1924553770907926769 · Twitter Post
• https://patchstack.com/database/wordpress/theme/wproject/vulnerability/wordpress-wproject-theme-5-8-0-subscriber-privilege-escalation-vulnerability?_s_id=cve · Note
• https://t.me/cvetracker/24265 · Telegram Post