CVE-2025-12637: Elastic Theme Editor <= 0.0.3 - Authenticated (Subscriber+) Arbitrary File Upload
The Elastic Theme Editor plugin for WordPress is vulnerable to arbitrary file uploads due to a dynamic code generation feature in the processtheme function in all versions up to, and including, 0.0.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to upload arbitrary files on the affected site's server which may make remote code execution possible.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-12637?
CVE-2025-12637 is considered a high severity vulnerability due to its potential for arbitrary file uploads.
How do I fix CVE-2025-12637?
To fix CVE-2025-12637, update the Elastic Theme Editor plugin to version 0.0.4 or later.
Who is affected by CVE-2025-12637?
CVE-2025-12637 affects all versions of the Elastic Theme Editor plugin for WordPress up to and including 0.0.3.
What type of attack can CVE-2025-12637 be exploited by?
CVE-2025-12637 can be exploited by authenticated attackers with Subscriber-level access to upload arbitrary files.
What functionality in CVE-2025-12637 allows for exploitation?
The vulnerability in CVE-2025-12637 arises from a dynamic code generation feature in the process_theme function.