CVE-2025-13398: WordPress plugin vulnerability

Published Sep 2, 2026

Updated

Rejected reason: This CVE ID is a duplicate of CVE-2025-13542 and was never published. Both IDs were assigned to the same unauthenticated privilege escalation vulnerability in the DesignThemes LMS WordPress plugin. All CVE users should reference CVE-2025-13542 instead of this ID.

Affected Software

2 affected components

WordPress plugin

DesignThemes LMS

Event History

Jan 1, 1970

CVE Published

via MITRE·12:00 AM

Sep 2, 2026

Rejected

via MITRE·02:31 PM

Rejected

via MITRE·02:37 PM

CVE Published

via NVD·03:17 PM

Data Sourced

via NVD·03:17 PM

Description

Frequently Asked Questions

Should this identifier be used for vulnerability tracking or remediation decisions?

No. This ID was rejected as a duplicate and was never published; tracking and remediation should reference CVE-2025-13542 instead.

What vulnerability does the replacement CVE cover?

The replacement CVE covers the same unauthenticated privilege escalation vulnerability in the DesignThemes LMS WordPress plugin.

CVE-2025-13398: WordPress plugin vulnerability

Affected Software

Event History

Frequently Asked Questions

Should this identifier be used for vulnerability tracking or remediation decisions?

What vulnerability does the replacement CVE cover?

Company

Resources

Contact

Frequently Asked Questions

Should this identifier be used for vulnerability tracking or remediation decisions?

What vulnerability does the replacement CVE cover?