CVE-2025-4606

CRITICAL

Uxper Sala - Startup & SaaS WordPress Theme <=1.1.4 - Privilege Escalation via Account Takeover

Title source: llm

Description

The Sala - Startup & SaaS WordPress Theme theme for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.1.4. This is due to the theme not properly validating a user's identity prior to updating their details like password. This makes it possible for unauthenticated attackers to change arbitrary user's passwords, including administrators, and leverage that to gain access to their account.

Exploits (4)

github WORKING POC 10 stars

by XiaomingX · pythonpoc

https://github.com/XiaomingX/data-cve-poc-py-v1/tree/main/2025/CVE-2025-4606

View Code ZIP pw:eip

nomisec SCANNER

by Yetazyyy · poc

https://github.com/Yetazyyy/CVE-2025-4606

View Code ZIP pw:eip

nomisec WORKING POC

by UcenHaxor07 · poc

https://github.com/UcenHaxor07/CVE-2025-4606

View Code ZIP pw:eip

nomisec WORKING POC

by Yucaerin · poc

https://github.com/Yucaerin/CVE-2025-4606

View Code ZIP pw:eip

References (2)

[Various Sources] https://themeforest.net/item/sala-startup-saas-wordpress-theme/33843955?s_rank=4

[Third Party Advisory] https://www.wordfence.com/threat-intel/vulnerabilities/id/aa385a1f-1623-4f0a-bb2f-d4564b8f91bf?source=cve

Scores

CVSS v3 9.8

EPSS 0.0012

EPSS Percentile 30.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-620

Status published

Products (1)

uxper/Sala - Startup & SaaS WordPress Theme < 1.1.4

Published Jul 09, 2025

Tracked Since Feb 18, 2026