themegrill Spacious vulnerabilities (CVE)

CVE records published for themegrill Spacious, newest first. Follow to get an email when a new one appears.

1 results

4.3Medium

CVE-2025-9331 1 year ago

Spacious <= 1.9.11 - Missing Authorization to Autheticated (Subscriber+) Demo Data Import

themegrill Spacious

The Spacious theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the 'welcome_notice_import_handler' function in all versions up to, and including, 1.9.11. This makes it possible for authenticated attack…