CVE-2025-32201: WordPress Xpro Theme Builder Plugin <= 1.2.8.4 - Broken Access Control vulnerability
Missing Authorization vulnerability in Xpro Xpro Theme Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Xpro Theme Builder: from n/a through 1.2.8.3.
Other sources
Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through <= 1.2.8.4.
— MITRE
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-32201?
CVE-2025-32201 is classified as a high-severity vulnerability due to its potential for unauthorized access.
How do I fix CVE-2025-32201?
To fix CVE-2025-32201, update the Xpro Theme Builder to the latest version beyond 1.2.8.3.
What vulnerabilities are associated with CVE-2025-32201?
CVE-2025-32201 is associated with a Missing Authorization vulnerability that can lead to incorrect access control.
What versions of the Xpro Theme Builder are affected by CVE-2025-32201?
CVE-2025-32201 affects all versions of Xpro Theme Builder from n/a up to and including 1.2.8.3.
Is CVE-2025-32201 exploitable on WordPress?
Yes, CVE-2025-32201 is exploitable on the WordPress Xpro Theme Builder Plugin prior to version 1.2.8.3.