Privilege Escalation Vulnerability in Listee Theme for WordPress

CVE-2025-12981

What is CVE-2025-12981?

The Listee theme for WordPress is susceptible to a privilege escalation issue found in the user registration function of the bundled listee-core plugin. This vulnerability arises from inadequate validation of the user_role parameter, which allows unauthenticated attackers to manipulate this parameter during the registration process, enabling them to register as an Administrator. It is crucial for users and administrators of the Listee theme to apply updates and ensure proper security measures are in place.

References