The ColorMag theme for WordPress is vulnerable to unauthorized modification of data due to a missing capability check on the welcome_notice_import_handler() function in all versions up to, and including, 4.0.19. This vulnerability allows authenticated attackers with Subscriber-level access and above to install the ThemeGrill Demo Importer plugin.
Details
| Severity | Base Score | CVE |
|---|---|---|
| MEDIUM | 4.3 | CVE-2025-9202 |
Exploitation
To exploit this vulnerability, an attacker with Subscriber-level access can leverage the missing capability check in the welcome_notice_import_handler() function to modify data and install the ThemeGrill Demo Importer plugin, potentially leading to further unauthorized actions within the WordPress site.
Affected Products
- ColorMag Theme: A popular WordPress theme that is vulnerable due to a missing capability check.
- ThemeGrill Demo Importer Plugin: Can be installed by attackers exploiting the vulnerability.
Mitigation
To mitigate this vulnerability, users should update the ColorMag theme to version 4.0.20 or later, where the capability check has been implemented to prevent unauthorized modifications.