Access Control Misconfiguration in Theater for WordPress by Jeroen Schmit

CVE-2025-31846

What is CVE-2025-31846?

The Theater for WordPress plugin by Jeroen Schmit contains a missing authorization vulnerability that allows unauthorized users to exploit incorrectly configured access control security levels. This poses a significant risk, enabling potential attackers to gain access to restricted functionalities or sensitive information. It is essential for users to update to secure their installations from exploitation tactics that leverage this access control weakness.

References