CVE-2025-15689: WordPress Capella theme <= 2.5.5 - Privilege Escalation vulnerability
Published Aug 20, 2026
·Updated
Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.
Affected Software
1 affected component
WordPress Capella theme<=2.5.5
Event History
Aug 20, 2026
CVE Published
via MITRE·12:06 PM
Data Sourced
via MITRE·12:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does exploitation require an authenticated WordPress account or user interaction?
No. The vulnerability is unauthenticated and requires neither privileges nor user interaction. The listed attack vector is network-accessible.
2
What is the potential impact if this vulnerability is exploited?
Successful exploitation can result in high impact to confidentiality, integrity, and availability. The vulnerability has a critical CVSS score of 9.8.