Skip to content
OpenAdvisories

Vendor

wp-configurator

2 known vulnerabilities.

Products

Configurator Theme Core 1 WP Configurator Pro 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2026-32501

    WordPress WP Configurator Pro plugin <= 3.7.9 - Broken Access Control vulnerability

    Missing Authorization vulnerability in wp-configurator WP Configurator Pro wp-configurator-pro allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WP Configurator Pro: from n/a through <= 3.7.9.

    wp-configurator WP Configurator Pro
  • High 8.8
    CVE-2025-3101

    Configurator Theme Core <= 1.4.7 - Authenticated (Subscriber+) Privilege Escalation

    The Configurator Theme Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 1.4.7. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possib…

    wp-configurator Configurator Theme Core Web / CMS