Missing Authorization Vulnerability in Thim Elementor Kit by ThimPress

CVE-2025-24725

What is CVE-2025-24725?

A missing authorization vulnerability exists in the Thim Elementor Kit, allowing for the exploitation of improperly configured access control security levels. This issue poses a risk to users by potentially allowing unauthorized access to certain functionalities. The vulnerability affects all versions of Thim Elementor Kit from n/a through 1.2.8. Organizations using this plugin should assess their installations and apply necessary security measures to mitigate potential risks.

References