Skip to content
OpenAdvisories
Medium · 4.3 CVE-2025-67594 EUVD-2025-202059GHSA-9gj6-rwqc-4wvp

WordPress Thim Elementor Kit plugin <= 1.3.3 - Insecure Direct Object References (IDOR) vulnerability

Published Dec 9, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: ThimPress Product: Thim Elementor Kit

Description

Authorization Bypass Through User-Controlled Key vulnerability in ThimPress Thim Elementor Kit thim-elementor-kit allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Thim Elementor Kit: from n/a through <= 1.3.3.

Affected products

VendorProductAffectedFixed
ThimPress Thim Elementor Kit ≤ 1.3.3 —

References