CVE-2025-69029

MediumCVSS 5.4

Published: 30/12/2025(UTC)Updated: 07/10/2026(UTC)Translated: 01/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

12th percentile - higher than 12% of all known CVEs

Summary

The Struktur plugin (struktur) contains an authorization bypass through user-controlled key vulnerability, allowing exploitation of incorrectly configured access control security levels. The issue affects versions up to and including 2.5.1.

Risk Assessment

An attacker can manipulate a user-controlled key to gain unauthorized access to functions or data, potentially leading to system integrity compromise.

Recommendation

Update the Struktur plugin to the latest available version that includes the security fix.

Other vulnerabilities in Struktur

CVE-2026-57802High
A vulnerability in the Struktur theme by Select-Themes allows PHP Local File Inclusion due to improper control of filename for include/require statement. This affects versions before 2.7.

Original NVD description (English source)

Authorization Bypass Through User-Controlled Key vulnerability in Select-Themes Struktur struktur allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Struktur: from n/a through <= 2.5.1.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS