CVE-2025-4606

The CVE-2025-4606 entry describes unauthenticated privilege escalation in the Sala - Startup & SaaS WordPress Theme (versions prior to or up to 1.1.4). The root cause is the theme’s failure to properly validate a user’s identity before updating details (e.g., passwords), enabling an unauthenticat...

CVE-2024-12402

The Themes Coder – Create Android & iOS Apps For Your Woocommerce Site plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.3.4. This is due to the plugin not properly validating a user's identity prior to updating their password...