CVE-2025-53345

HighCVSS 8.8

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

Missing authorization in ThimPress Thim Core allows code execution after installing a malicious vulnerable plugin. This affects versions up to 2.3.3.

Risk Assessment

An attacker can take over the site by installing a seemingly harmless plugin, leading to full system compromise.

Recommendation

Update Thim Core to the latest available version and verify all plugins before installation.

Other vulnerabilities in Thim Core

CVE-2025-53346Medium
Missing authorization in the Thim Core plugin (versions up to 2.3.3) allows exploiting incorrectly configured access control security levels.

Original NVD description (English source)

Missing Authorization vulnerability leading to code execution after installing malicious vulnerable plugin in ThimPress Thim Core. This issue affects Thim Core: from n/a through 2.3.3.