WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability

Broken Access Control Vulnerability discovered by Bonds in WordPress Theme DriCub versions = 2.9...

CVE-2025-58004

CVE-2025-58004 corresponds to the WordPress theme vulnerability in DriCub (Driving School)

CVE-2025-58004 WordPress DriCub Theme <= 2.9 - Broken Access Control Vulnerability

Missing Authorization vulnerability in SmartDataSoft DriCub dricub-driving-school allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DriCub: from n/a through = 2.9...

CVE-2025-58005

CVE-2025-58005 is a Server-Side Request Forgery (SSRF) vulnerability in the DriCub WordPress theme (DriCub – Driving School WordPress Theme) affecting version 2.9 and earlier. The connected Wordfence vulnerability detail confirms an unauthenticated SSRF condition with a Patch Status of Unpatched,...

CVE-2025-58005 WordPress DriCub Theme <= 2.9 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in SmartDataSoft DriCub allows Server Side Request Forgery. This issue affects DriCub: from n/a through 2.9...

CVE-2025-58005 WordPress DriCub Theme <= 2.9 - Server Side Request Forgery (SSRF) Vulnerability

Server-Side Request Forgery SSRF vulnerability in SmartDataSoft DriCub dricub-driving-school allows Server Side Request Forgery.This issue affects DriCub: from n/a through = 2.9...

WordPress DriCub Theme <= 2.9 is vulnerable to Server Side Request Forgery (SSRF)

Software DriCub Type Theme Vulnerable versions = 2.9 Fixed in N/A OWASP Top 10 A3: Injection Classification Server Side Request Forgery SSRF CVE CVE-2025-58005 Patch priority Low CVSS severity Low 5.4 Developer Claim ownership PSID 1d20e3f4bf71 Credits Bonds Required privilege Unauthenticated...

WordPress DriCub Theme <= 2.9 is vulnerable to Broken Access Control

Software DriCub Type Theme Vulnerable versions = 2.9 Fixed in N/A OWASP Top 10 A1: Broken Access Control Classification Broken Access Control CVE CVE-2025-58004 Patch priority Low CVSS severity Low 5.3 Developer Claim ownership PSID 170d8c12fcfe Credits Bonds Required privilege Unauthenticated...