Unauthorized Data Modification in Eco Nature WordPress Theme by CMSMasters

CVE-2025-0952

What is CVE-2025-0952?

The Eco Nature - Environment & Ecology WordPress Theme is susceptible to unauthorized data modification due to a lack of capability checks on the 'cmsmasters_hide_admin_notice' AJAX action. This vulnerability affects all versions up to and including 2.0.4. Authenticated attackers with Subscriber-level access or higher can exploit this flaw to modify site options, potentially triggering errors that disrupt service for legitimate users. This could lead to a denial of service, as attackers can alter settings related to user registration and other critical functionalities.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References