The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.0.19. This vulnerability allows authenticated attackers with Subscriber-level access and above to install the ThemeGrill Demo Importer plugin.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-9202 |
Exploitation
To exploit this vulnerability, an attacker with Subscriber-level access can invoke the welcome_notice_import_handler() function without proper capability checks, allowing them to modify data and potentially install unauthorized plugins.
Affected Products
- ColorMag Theme: A popular WordPress theme that is vulnerable due to a missing capability check.
Mitigation
To mitigate this vulnerability, it is recommended to update the ColorMag theme to the latest version where the capability checks have been implemented properly. Additionally, restricting access to the theme settings for lower privilege users can help reduce the risk.