Unauthorized Data Modification in Buzz Club WordPress Theme by Cmsmasters

CVE-2025-0515

What is CVE-2025-0515?

The Buzz Club – Night Club, DJ and Music Festival Event WordPress Theme allows authenticated attackers with Subscriber-level or higher permissions to modify option values without proper checks. This can lead to unauthorized changes that may disrupt site functionality or deny service to legitimate users. Particularly, the missing capability check on the 'cmsmasters_hide_admin_notice' function in versions up to 2.0.4 makes it possible for attackers to create conditions that could destabilize the site or potentially interfere with user registrations.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References