cveboard RSS feed

CVE-2025-0951

CVE.org · Published

Historical CVEsJSONAI instructions

Record status
Published
Identifier year (not publication year)
2025
Source publication
Source updated
Imported by cveboard
Source snapshot
cve_2026-10-24_midnight_baseline ·

Plain text

CNA source text (English)

LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated

Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate all of a site's plugins. While we escalated this to Envato after not being able to establish contact, it appears the developer added a nonce check, however that is not sufficient protection as the nonce is exposed to all users with access to the dashboard.

Scoped product and version facts

Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.

Exploitation unknown; this catalogue does not assess exploitation.

AI Hub - Startup & Technology WordPress Theme

Vendor
LiquidThemes
Product
AI Hub - Startup & Technology WordPress Theme
Platforms
Unknown
Default status
unaffected
AI Hub - Startup & Technology WordPress Theme · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedUnavailableUnavailableUnavailableNone listed

Hub - Responsive Multi-Purpose WordPress Theme

Vendor
LiquidThemes
Product
Hub - Responsive Multi-Purpose WordPress Theme
Platforms
Unknown
Default status
unaffected
Hub - Responsive Multi-Purpose WordPress Theme · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedUnavailableUnavailableUnavailableNone listed

ArcHub - Architecture and Interior Design WordPress Theme

Vendor
LiquidThemes
Product
ArcHub - Architecture and Interior Design WordPress Theme
Platforms
Unknown
Default status
unaffected
ArcHub - Architecture and Interior Design WordPress Theme · Scoped product and version facts
Version (version)Status (status)Version scheme (versionType)Exclusive end (lessThan)Inclusive end (lessThanOrEqual)Status changes (at → status)
0affectedUnavailableUnavailableUnavailableNone listed