Privilege Escalation in IMITHEMES Listing Plugin for WordPress

CVE-2025-2253

What is CVE-2025-2253?

The IMITHEMES Listing plugin is susceptible to a privilege escalation vulnerability that allows unauthenticated attackers to gain unauthorized access by taking over user accounts. This issue arises from improper validation of a verification code in the imic_reset_password_init() function, permitting attackers to change any user's password, including that of administrators, if they know the user's email address. Therefore, it is crucial for users and administrators to stay informed about this vulnerability and take necessary precautions.

References