Broken Access Control in JNews Theme by Jegtheme

CVE-2025-39373

What is CVE-2025-39373?

A vulnerability has been identified in the JNews theme by Jegtheme, which allows unauthorized access due to missing authorization checks. This flaw affects versions from n/a through 11.6.5, potentially enabling attackers to bypass user privileges or access restricted functionalities, leading to unauthorized data exposure or manipulation on WordPress sites. Considering the widespread use of the JNews theme, it's crucial for website administrators to implement necessary security measures to protect their platforms.

References