CVE Daily

CVE-2015-10139

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions ...

High CVSS 8.8

Overview

The WPLMS theme for WordPress is vulnerable to Privilege Escalation in versions 1.5.2 to 1.8.4.1 via the 'wp_ajax_import_data' AJAX action. This makes it possible for authenticated attackers to change otherwise restricted settings and potentially create a new accessible admin account.

CWE: CWE-269 Published: 2025-07-19T12:15:35.127
Risk analysis

This vulnerability is rated 🟠 HIGH.

  • CVSS: 8.8 (HIGH)
  • Detected tags: priv_esc, wordpress (tag impact: HIGH)

Recommended actions:

  • Fix privilege escalation urgently.
  • Enforce least-privilege and strengthen EDR detection.

Recommended tools

Tags