Privilege Escalation Vulnerability in Templines Elementor Helper Core for WordPress

CVE-2025-1295

Summary

The Templines Elementor Helper Core plugin for WordPress is susceptible to a privilege escalation issue due to inadequate restrictions on user meta updates. This vulnerability allows authenticated attackers, with at least Subscriber-level access, to elevate their privileges to that of an Administrator. This exploitation is contingent upon the installation and activation of the BuddyPress plugin, which creates a pathway for unauthorized role changes.

References