PT-2025-46796 · WordPress · Theater For Wordpress

Published 2025-11-13 · Updated 2025-11-13 · CVE-2025-64259

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Theater for WordPress versions prior to 0.18.9

Description An authorization issue exists in the Theater for WordPress plugin. The problem stems from incorrectly configured access control security levels, potentially allowing unauthorized access.

Recommendations Update Theater for WordPress to a version greater than 0.18.8.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2025-64259

Affected Products

Theater For Wordpress

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-64259 · Security Note
• https://t.me/CVEtracker/37214 · Telegram Post
• https://patchstack.com/database/Wordpress/Plugin/theatre/vulnerability/wordpress-theater-for-wordpress-plugin-0-18-8-broken-access-control-vulnerability?_s_id=cve · Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/theatre/vulnerability/wordpress-theater-for-wordpress-plugin-0-18-8-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/VulmonFeeds/status/1988977048317009941 · Twitter Post