Skip to content
OpenAdvisories

Product · wp-configurator

Configurator Theme Core

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.8
    CVE-2025-3101

    Configurator Theme Core <= 1.4.7 - Authenticated (Subscriber+) Privilege Escalation

    The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possib…

    wp-configurator Configurator Theme Core Web / CMS