PT-2025-49968 · Thimpress · Thimpress Thim Elementor Kit

Published 2025-12-09 · Updated 2025-12-15 · CVE-2025-67594

Positive Technologies (AI Summary)

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions ThimPress Thim Elementor Kit versions through 1.3.3

Description An authorization bypass exists due to incorrectly configured access control security levels in ThimPress Thim Elementor Kit. This allows exploitation through user-controlled keys.

Recommendations Update ThimPress Thim Elementor Kit to a version newer than 1.3.3.

Fix

IDOR

Weakness Enumeration

CWE-639

Related Identifiers

CVE-2025-67594

Affected Products

Thimpress Thim Elementor Kit

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2025-67594 · Security Note
• https://vdp.patchstack.com/database/Wordpress/Plugin/thim-elementor-kit/vulnerability/wordpress-thim-elementor-kit-plugin-1-3-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve · Note
• https://t.me/CVEtracker/39263 · Telegram Post
• https://twitter.com/CVEnew/status/2000611264935166377 · Twitter Post
• https://patchstack.com/database/Wordpress/Plugin/thim-elementor-kit/vulnerability/wordpress-thim-elementor-kit-plugin-1-3-3-insecure-direct-object-references-idor-vulnerability?_s_id=cve · Note