CVE-2025-58198: WordPress Xpro Theme Builder Plugin <= 1.2.9 - Broken Access Control Vulnerability
Missing Authorization vulnerability in Xpro Xpro Theme Builder allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Xpro Theme Builder: from n/a through 1.2.9.
Other sources
Missing Authorization vulnerability in Xpro Xpro Theme Builder xpro-theme-builder allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Xpro Theme Builder: from n/a through <= 1.2.9.
— MITRE
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2025-58198?
CVE-2025-58198 is classified as a missing authorization vulnerability that can lead to unauthorized access due to incorrectly configured access control levels.
How do I fix CVE-2025-58198?
To fix CVE-2025-58198, update the Xpro Theme Builder or WordPress Xpro Theme Builder Plugin to the latest version that addresses this vulnerability.
What versions are affected by CVE-2025-58198?
CVE-2025-58198 affects Xpro Theme Builder versions up to and including 1.2.9.
What are the potential risks of CVE-2025-58198?
Exploiting CVE-2025-58198 can allow unauthorized users to gain access to restricted areas of the Xpro Theme Builder.
Who is impacted by CVE-2025-58198?
Users of Xpro Theme Builder and the WordPress Xpro Theme Builder Plugin prior to version 1.2.9 are at risk from CVE-2025-58198.