CVE-2025-64274

MediumCVSS 4.3

Published: 13/11/2025(UTC)Updated: 07/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

7th percentile - higher than 7% of all known CVEs

Summary

Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor (wpkoi-templates-for-elementor) allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4.

Risk Assessment

An attacker could exploit incorrectly configured access control mechanisms, potentially leading to unauthorized access to functions or data.

Recommendation

Upgrade WPKoi Templates for Elementor to a version later than 3.4.4 if available, and verify access control configuration.

Other vulnerabilities in WPKoi Templates for Elementor

CVE-2026-85302Medium
The WPKoi Templates for Elementor WordPress plugin contains a DOM-Based Cross-site Scripting (XSS) vulnerability due to improper input neutralization during web page generation. The issue affects versions from n/a through 3.7.2.

Original NVD description (English source)

Missing Authorization vulnerability in wpkoithemes WPKoi Templates for Elementor wpkoi-templates-for-elementor allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WPKoi Templates for Elementor: from n/a through <= 3.4.4.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS