Information Exposure Vulnerability in DethemeKit For Elementor Plugin by WordPress

CVE-2025-0661

What is CVE-2025-0661?

The DethemeKit For Elementor plugin for WordPress is susceptible to an Information Exposure vulnerability that allows authenticated attackers with Contributor-level access and above to duplicate posts. This weakness arises from inadequate restrictions in the duplicate_post() function, enabling access to sensitive data from password protected, private, draft, or scheduled posts that should remain confidential.

References