SecvalisbySYSDEVOPS.EU
CVE Catalog
EnglishPolski

CVE-2025-15689

CriticalCVSS 9.8
Published: Updated: Translated: NVD NIST

Exploitation Probability (EPSS)

Low risk
0.48%

39th percentile - higher than 39% of all known CVEs

Summary

Unauthenticated Privilege Escalation vulnerability in Capella versions up to 2.5.5. An attacker can gain higher privileges without logging in.

Risk Assessment

Risk of administrator account takeover and full control of the WordPress site.

Recommendation

Update the Capella plugin to the latest version that includes the security fix.

Other vulnerabilities in Capella

Original NVD description (English source)

Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS