Authorization Bypass Vulnerability in Select-Themes Struktur by Select Themes
CVE-2025-69029

5.4MEDIUM

Key Information:

Vendor

WordPress
Status
Struktur
Vendor
CVE Published:
30 December 2025

What is CVE-2025-69029?

An authorization bypass vulnerability exists in Select-Themes Struktur, allowing attackers to exploit poor access control configurations. This may enable unauthorized users to gain access to specific resources they should not be able to access. The issue affects all versions of Struktur up to 2.5.1, necessitating immediate remediation to secure user data and maintain the integrity of the affected systems.

Affected Version(s)

Struktur 0 <= 2.5.1

References

https://patchstack.com/database/Wordpress/Theme/struktur/...
vdb-entry

CVSS V3.1

Score:
5.4
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity) | Patchstack Bug Bounty Program
.