CVE-2025-3105
Vehica Core <= 1.0.97 - Authenticated (Subscriber+) Privilege Escalation
Vexday Risk Score
21Low
SSVC decision (CISA)
Track
No exploitation signal → monitor
CVSS 8.8EPSS 0.3%KEV nãoPoC —Nuclei —Metasploit —Patch —
Lifecycle
04 Apr 2025Published on NVD
Recommendation: Monitor — no exploitation signal at the moment.
The Vehica Core plugin for WordPress, used by the Vehica - Car Dealer & Listing WordPress Theme, is vulnerable to privilege escalation in all versions up to, and including, 1.0.97. This is due to the plugin not properly validating user meta fields prior to updating them in the database. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change escalate their privileges to Administrator.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Affected products
TangibleWP · Vehica CoreWant to know if your infrastructure is exposed to this?
Talk to TrueHacking →