Lucene search
+L

6 matches found

NVD
NVD
•added 2026/08/06 12:16 p.m.•17 views

CVE-2025-9266

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

4.3CVSS0.00264EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2026/08/06 11:29 a.m.•54 views

CVE-2025-9266 Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

4.3CVSS0.00264EPSS
SaveExploits0References2
EUVD
EUVD
•added 2026/08/06 11:29 a.m.•16 views

EUVD-2025-210641

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

4.3CVSS5.8AI score0.00264EPSS
SaveExploits0References2
Vulnrichment
Vulnrichment
•added 2026/08/06 11:29 a.m.•13 views

CVE-2025-9266 Accelerate <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueuescripts function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to instal...

4.3CVSS5.8AI score0.00264EPSS
SaveExploits0References2
CVE
CVE
•added 2026/08/06 11:29 a.m.•72 views

CVE-2025-9266

CVE-2025-9266 affects the WordPress Accelerate theme up to version 1.5.3. The root cause is a missing capability check in enqueue_scripts(), enabling authenticated users with Subscriber-level access and above to install and activate the ThemeGrill Demo Importer plugin. The impact is unauthorized ...

4.3CVSS5.8AI score0.00264EPSS
SaveExploits0References2
Patchstack
Patchstack
•added 2026/08/05 10:18 p.m.•10 views

WordPress Accelerate theme <= 1.5.3 - Missing Authorization to Authenticated (Subscriber+) ThemeGrill Demo Importer Plugin Installation vulnerability

Missing Authorization to Authenticated Subscriber+ ThemeGrill Demo Importer Plugin Installation vulnerability discovered by Dmitrii Ignatyev in WordPress Theme Accelerate versions = 1.5.3...

4.3CVSS5.8AI score0.00264EPSS
SaveExploits0References1Affected Software1
Rows per page
Query Builder