AUGUST 16, 2026
Live Feed
Back to database
Case File

CVE-2025-9266

MEDIUM · CVSS 4.3 EPSS 0.16%

Source: NVD + CISA KEV + EPSS · Published 2026-08-06 · Last synced 2026-08-16

CyberRota Analysis

AI-Generated

The Accelerate theme for WordPress is susceptible to unauthorized data modification due to a lack of capability checks in the enqueue_scripts() function, affecting all versions up to 1.5.3. This vulnerability allows authenticated attackers with Subscriber-level access or higher to install and activate the ThemeGrill Demo Importer plugin, potentially compromising site integrity. WordPress site administrators using the Accelerate theme should prioritize applying the necessary updates to mitigate this risk.

CVE
CVE-2025-9266
Severity
MEDIUM
CVSS
4.3
EPSS
0.16%
WordPress

Original NVD Description

The Accelerate theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the enqueue_scripts() function in all versions up to, and including, 1.5.3. This makes it possible for authenticated attackers, with Subscriber-level access and above, to install and activate the ThemeGrill Demo Importer plugin.