Medium · 4.3 CVE-2025-53341 EUVD-2025-24897GHSA-xrfx-hx2g-wgv7

WordPress Stratus theme <= 4.2.5 - Broken Access Control vulnerability

Published Aug 14, 2025 · Updated Sep 14, 2026 · Assigned by Patchstack

Vendor: Pixel Makers Creative Product: App, SaaS & Software Startup Tech Theme - Stratus

Description

Missing Authorization vulnerability in Pixel Makers Creative INC. App, SaaS & Software Startup Tech Theme - Stratus allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects App, SaaS & Software Startup Tech Theme - Stratus: from n/a before 4.2.11.

Affected products

Vendor	Product	Affected	Fixed
Pixel Makers Creative	App, SaaS & Software Startup Tech Theme - Stratus	< 4.2.11	4.2.11

References

https://patchstack.com/database/wordpress/theme/stratusx/vulnerability/wordpress-stratus-theme-theme-4-2-5-broken-access-control-vulnerability?_s_id=cve vdb-entry