CVE-2025-13398: WordPress plugin vulnerability
Published Sep 2, 2026
·Updated
Rejected reason: This CVE ID is a duplicate of CVE-2025-13542 and was never published. Both IDs were assigned to the same unauthenticated privilege escalation vulnerability in the DesignThemes LMS WordPress plugin. All CVE users should reference CVE-2025-13542 instead of this ID.
Affected Software
2 affected components
WordPress plugin
DesignThemes LMS
Event History
Jan 1, 1970
CVE Published
via MITRE·12:00 AM
Sep 2, 2026
Rejected
via MITRE·02:31 PM
CVE Published
via MITRE·02:37 PM
Rejected
via MITRE·02:37 PM
Data Sourced
via NVD·03:17 PM
Description
Frequently Asked Questions
1
Should this identifier be used for vulnerability tracking or remediation decisions?
No. This ID was rejected as a duplicate and was never published; tracking and remediation should reference CVE-2025-13542 instead.
2
What vulnerability does the replacement CVE cover?
The replacement CVE covers the same unauthenticated privilege escalation vulnerability in the DesignThemes LMS WordPress plugin.