Missing Authorization Issue in Theater for WordPress Plugin by Jeroen Schmit

CVE-2025-64259

What is CVE-2025-64259?

A Missing Authorization vulnerability in the Theater for WordPress plugin by Jeroen Schmit allows attackers to exploit incorrectly configured access control security levels. This flaw can permit unauthorized users to access sensitive functionality, compromising the integrity and confidentiality of the affected WordPress site. Users running version 0.18.8 and earlier are particularly at risk. It is essential to address this issue by ensuring secure access controls are implemented.

References