Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.6. This is due to the plugin not properly validating a user's identity prior to updating their details like email. This makes it possible for authenticated attackers, with Subscriber-level access and above, to change arbitrary user's email addresses, including administrators, and leverage that to reset the user's password and gain access to their account.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-02-11 | 3 | Disclosure3 |
| 2026-02-12 | 1 | Disclosure1 |
| 2026-02-16 | 1 | Disclosure1 |
CVE-2025-15096 WordPress Videospirecore Theme Plugin Privilege Escalation via Account Takeover https://vulmon.com/vulnerabilitydetails?qid=CVE-2025-15096
Post summary
CVE-2025-15096 is a privilege escalation vulnerability in the WordPress Videospirecore Theme Plugin that could allow account takeover. No PoC, exploit code, or patch information is mentioned.
CVE-2025-15096 (CVSS:8.8, HIGH) is Awaiting Analysis. The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all..https://nvd.nist.gov/vuln/detail/CVE-2025-15096 #cybersecurityawareness #cybersecurity #CVE #infosec #hacker #nvd #mitre
Post summary
The tweet announces CVE-2025-15096 with a high CVSS score and privilege escalation details, but provides no PoC, exploit code, or patch information.
[CVE-2025-15096: HIGH] WordPress plugin 'Videospirecore Theme Plugin' has a serious vulnerability allowing privilege escalation via account takeover in versions up to 1.0.6 due to insufficient user identity ...#cve,CVE-2025-15096,#cybersecurity https://cvefind.com/CVE-2025-15096
Post summary
The tweet announces a high‑severity privilege escalation flaw in the Videospirecore Theme Plugin, highlighting that versions up to 1.0.6 are vulnerable due to insufficient user identity checks, but it provides no proof of concept, exploit code, or patch information.
CVE-2025-15096 The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.6. This is… https://www.cve.org/CVERecord?id=CVE-2025-15096
Post summary
CVE-2025-15096 exposes the Videospirecore Theme Plugin (up to 1.0.6) to privilege escalation through account takeover.
🟠 CVE-2025-15096 - High The 'Videospirecore Theme Plugin' plugin for WordPress is vulnerable to privilege escalation via account takeover in all versions up to, and including, 1.0.6. This is due to the plugin not pr... https://www.thehackerwire.com/vulnerability/CVE-2025-15096/ https://t.co/QeXpfS2h5w
Post summary
The article announces a privilege‑escalation flaw in the Videospirecore Theme Plugin (WordPress) affecting all versions up to 1.0.6, but does not provide proof‑of‑concept, exploit code, or patch details.