Imithemes Listing
Approved changes feed: RSS · Atom
cpe:2.3:a:imithemes:imithemes_listing:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Imithemes (33b2ef36-b205-51ef-a0b6-4f3fc28d7d97) |
|---|---|
| Product | Imithemes Listing (8197bdc4-7b5a-5d52-b5f4-af1cf65da310) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2025-2253 |
vulnerable | 2026-06-08 07:16:56.576023 |
IMITHEMES Listing <= 3.3 - Unauthenticated Privilege Escalation via Unverified Password Reset
CRITICAL (9.8)
The IMITHEMES Listing plugin is vulnerable to privilege escalation via account takeover in all versions up to, and including, 3.3. This is due to the plugin not properly validating a verification code value prior to updating their password through the imic_reset_password_init() function. This makes it possible for unauthenticated attackers to change any user's passwords, including administrators if the users email is known.
Published: 2025-05-09T06:42:35.358Z
Updated: 2026-04-08T16:51:52.808Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.