CVE-2019-25142

The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and including,1.6.89 (Mesmerize) and 1.0.172 (Materialis). This is due to 'companion_disable_popup' function only checking the nonce while sending user input to the 'update_option' function. This makes it possible for authenticated attackers to change otherwise restricted options.

• CWE-862
• CWE-862

• https://blog.nintechnet.com/wordpress-mesmerize-and-materialis-themes-fixed-an-authenticated-options-change-vulnerability/Exploit, Technical Description, Third Party Advisory
• https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121290%40materialis&new=121290%40materialis&sfp_email=&sfph_mail=Patch, Release Notes
• https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121291%40mesmerize&new=121291%40mesmerize&sfp_email=&sfph_mail=Patch, Release Notes
• https://wordpress.org/themes/materialis/Product
• https://wordpress.org/themes/mesmerize/Product
• https://wpscan.com/vulnerability/e4d70f03-69d5-4cca-8300-985f68d19ddcThird Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9c3302-47cd-4dbe-b79e-5e6032928074?source=cvePatch, Third Party Advisory
• https://blog.nintechnet.com/wordpress-mesmerize-and-materialis-themes-fixed-an-authenticated-options-change-vulnerability/Exploit, Technical Description, Third Party Advisory
• https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121290%40materialis&new=121290%40materialis&sfp_email=&sfph_mail=Patch, Release Notes
• https://themes.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=121291%40mesmerize&new=121291%40mesmerize&sfp_email=&sfph_mail=Patch, Release Notes
• https://wordpress.org/themes/materialis/Product
• https://wordpress.org/themes/mesmerize/Product
• https://wpscan.com/vulnerability/e4d70f03-69d5-4cca-8300-985f68d19ddcThird Party Advisory
• https://www.wordfence.com/threat-intel/vulnerabilities/id/8c9c3302-47cd-4dbe-b79e-5e6032928074?source=cvePatch, Third Party Advisory

Published

Jun 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2019-25136A compromised child process could have injected XBL Bindings…10
• CVE-2019-25137Umbraco CMS 4.11.8 through 7.15.10, and 7.12.4, allows Remot…7.2
• CVE-2019-25138The User Submitted Posts plugin for WordPress is vulnerable …9.8
• CVE-2019-25139The Coming Soon Page & Maintenance Mode plugin for WordPress…5.3
• CVE-2019-25140The WordPress Coming Soon Page & Maintenance Mode plugin for…6.1
• CVE-2019-25141The Easy WP SMTP plugin for WordPress is vulnerable to autho…9.8
• CVE-2019-25143The GDPR Cookie Compliance plugin for WordPress is vulnerabl…4.3
• CVE-2019-25144The WP HTML Mail plugin for WordPress is vulnerable to HTML …6.1
• CVE-2019-25145The Contact Form & SMTP Plugin by PirateForms plugin for Wor…6.1
• CVE-2019-25146The DELUCKS SEO plugin for WordPress is vulnerable to Stored…6.1
• CVE-2019-25147The Pretty Links plugin for WordPress is vulnerable to Store…6.1
• CVE-2019-25148The WP HTML Mail plugin for WordPress is vulnerable to HTML …6.1