CVE-2025-53346

MediumCVSS 4.3

Published: 02/06/2026(UTC)Updated: 22/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.15%

5th percentile - higher than 5% of all known CVEs

Summary

Missing authorization in the Thim Core plugin (versions up to 2.3.3) allows exploiting incorrectly configured access control security levels.

Risk Assessment

An attacker may gain unauthorized access to administrative functions or data, leading to privilege escalation.

Recommendation

Update the Thim Core plugin to the latest available version.

Other vulnerabilities in Thim Core

CVE-2025-53345High
Missing authorization in ThimPress Thim Core allows code execution after installing a malicious vulnerable plugin. This affects versions up to 2.3.3.

Original NVD description (English source)

Missing Authorization vulnerability in ThimPress Thim Core allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Thim Core: from n/a through 2.3.3.