CVE-2025-15689

CriticalCVSS 9.8

Published: 20/08/2026(UTC)Updated: 20/08/2026(UTC)Translated: 20/08/2026(UTC)NVD NIST

Summary

Unauthenticated Privilege Escalation vulnerability in Capella versions up to 2.5.5. An attacker can gain higher privileges without logging in.

Risk of administrator account takeover and full control of the WordPress site.

Update the Capella plugin to the latest version that includes the security fix.

Original NVD description (English source)

Unauthenticated Privilege Escalation in Capella <= 2.5.5 versions.