Access Control Flaw in Webriti Shk Corporate Theme
CVE-2025-58824

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Shk Corporate
Vendor
CVE Published:
5 September 2025

What is CVE-2025-58824?

The Webriti Shk Corporate theme has a significant access control vulnerability, allowing potential attackers to exploit incorrectly configured security levels. This flaw affects versions from n/a to 2.4.1.1, enabling unauthorized access to restricted areas. Users of the Shk Corporate theme should take immediate action to secure their sites and ensure proper authorization mechanisms are in place.

Affected Version(s)

Shk Corporate 0 <= 2.4.1.1

References

https://patchstack.com/database/Wordpress/Theme/shk-corpo...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Martino Spagnuolo (r3verii) (Patchstack Alliance)
.