Medium severity4.3NVD Advisory· Published Jun 6, 2025· Updated Jun 17, 2026

CVE-2025-1778

Description

The Art Theme for WordPress is vulnerable to unauthorized access due to a missing capability check on the 'arttheme_theme_option_restore' AJAX function in all versions up to, and including, 3.12.2.3. This makes it possible for authenticated attackers, with subscriber-level access and above, to delete the theme option.

Affected products

WordPress/Art Themellm-create
Range: <=3.12.2.3
WordPress/Artwp-canonicalize

Patches

Vulnerability mechanics

References

themeforest.net/item/art-simple-clean-wordpress-theme-for-creatives/20170299nvd
www.wordfence.com/threat-intel/vulnerabilities/id/c54c1fab-634d-4d1a-8234-8f1ae41c7cd4nvd

News mentions

No linked articles in our index yet.

cvss	0.280
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000