PT-2025-52102 · WordPress · Jthemes Sale! Immigration Law

Tran Nguyen Bao Khanh · Published 2025-12-18 · Updated 2025-12-18 · CVE-2025-59134

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex versions through 1.5.8

Description An incorrect privilege assignment exists in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex, potentially allowing privilege escalation. The issue relates to how permissions are handled within the application.

Recommendations Update Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex to a version later than 1.5.8.

Fix

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2025-59134

Affected Products

Jthemes Sale! Immigration Law

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2025-59134 · Security Note
• https://patchstack.com/database/Wordpress/Theme/immiex/vulnerability/wordpress-sale-immigration-law-visa-services-support-migration-agent-consulting-theme-1-5-8-privilege-escalation-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2001736662167024063 · Twitter Post
• https://vdp.patchstack.com/database/Wordpress/Theme/immiex/vulnerability/wordpress-sale-immigration-law-visa-services-support-migration-agent-consulting-theme-1-5-8-privilege-escalation-vulnerability?_s_id=cve · Note