CVE-2025-0951

Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate all of a site's plugins. While we escalated this to Envato after not being able to establish contact, it appears the developer added a nonce check, however that is not sufficient protection as the nonce is exposed to all users with access to the dashboard.

• CWE-862

• https://themeforest.net/user/liquidthemes
• https://www.wordfence.com/threat-intel/vulnerabilities/id/0099c700-e1af-4d97-a518-151a9139ea35?source=cve

Published

Aug 28, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-0945A vulnerability classified as critical has been found in its…9.8
• CVE-2025-0946A vulnerability classified as critical was found in itsource…9.8
• CVE-2025-0947A vulnerability, which was classified as critical, has been …8.8
• CVE-2025-0948A vulnerability, which was classified as critical, was found…8.8
• CVE-2025-0949A vulnerability has been found in itsourcecode Tailoring Man…8.8
• CVE-2025-0950A vulnerability was found in itsourcecode Tailoring Manageme…9.8
• CVE-2025-0952The Eco Nature - Environment & Ecology WordPress Theme theme…8.1
• CVE-2025-0953The SMTP for Sendinblue – YaySMTP plugin for WordPress is vu…6.1
• CVE-2025-0954The WP Online Contract plugin for WordPress is vulnerable to…6.5
• CVE-2025-0955The VidoRev Extensions plugin for WordPress is vulnerable to…5.3
• CVE-2025-0956The WooCommerce Recover Abandoned Cart plugin for WordPress …8.1
• CVE-2025-0957The SMTP for Amazon SES – YaySMTP plugin for WordPress is vu…7.2