CVE Search Engine - Security Vulnerabilities and Exploits Search Tool

show all

4 matches found

Patchstack•added 2026/02/19 7:27 a.m.•3 views

WordPress Buyent Theme (with Buyent Classified Plugin) plugin <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration vulnerability

Unauthenticated Privilege Escalation via User Registration vulnerability discovered by シルAsuna in WordPress Theme Buyent versions = 1.0.7...

9.8CVSS5.6AI score0.00109EPSS

Exploits0References1Affected Software1

CVE•added 2026/02/19 4:36 a.m.•12 views

CVE-2025-13851

CVE-2025-13851 concerns Buyent Theme with Buyent Classified Plugin (

9.8CVSS5.7AI score0.00109EPSS

Exploits0References2

Cvelist•added 2026/02/19 4:36 a.m.•25 views

CVE-2025-13851 Buyent Theme (with Buyent Classified Plugin) <= 1.0.7 - Unauthenticated Privilege Escalation via User Registration

The Buyent Classified plugin for WordPress bundled with Buyent theme is vulnerable to privilege escalation via user registration in all versions up to, and including, 1.0.7. This is due to the plugin not validating or restricting the user role during registration via the REST API endpoint. This...

9.8CVSS0.00109EPSS

Exploits0References2