What is the CVSS score of CVE-2025-15688?

CVE-2025-15688 has a CVSS 3.1 base score of 9.3 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L. EPSS exploitation probability: 0.3%.

Which versions of Capella are affected by CVE-2025-15688?

ThemeGoods Capella WordPress theme versions 2.5.5 and earlier contain an unauthenticated SQL injection vulnerability (CVSS 9.3) enabling remote attackers to extract sensitive database records,…

How to fix or mitigate CVE-2025-15688?

Within 24 hours, inventory all WordPress installations running Capella theme version 2.5.5 or earlier and immediately disable the theme or block access to vulnerable endpoints pending further assessment. Within 7 days, apply the vendor patch upon release by ThemeGoods and validate database integrity. Within 30 days, rotate all WordPress user passwords, audit database access logs for exploitation indicators, and implement database query monitoring to detect SQL injection attempts.

Capella CVE-2025-15688

EUVD-2025-210755 CRITICAL

SQL Injection (CWE-89)

2026-08-20 Patchstack

GHSA-ggjj-qx27-2jh5

SQLi Capella

9.3

CVSS 3.1 · Vendor: Patchstack

Severity by source

Vendor (Patchstack) PRIMARY

9.3 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

vuln.today AI

9.3 CRITICAL

Unauthenticated network SQLi (AV:N/AC:L/PR:N/UI:N); database read beyond the theme yields C:H with S:C, while no integrity change and only minor availability impact give I:N/A:L.

3.1 AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:L

4.0 AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:L/SC:N/SI:N/SA:N

Primary rating from Vendor (Patchstack).

CVSS VectorVendor: Patchstack

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

None

Availability

Low

Lifecycle Timeline

Analysis Generated

Aug 20, 2026 - 12:30 vuln.today

CVE Published

Aug 20, 2026 - 12:06 cve.org

CRITICAL 9.3

DescriptionCVE.org

Unauthenticated SQL Injection in Capella <= 2.5.5 versions.

AnalysisAI

Unauthenticated SQL injection in the ThemeGoods 'Capella' WordPress theme (versions 2.5.5 and earlier) lets remote attackers inject arbitrary SQL through an unsanitized parameter, exposing backend database contents including the wp_users table. Reported by Patchstack and rated CVSS 9.3 with a scope change, the flaw needs no authentication or user interaction; no public exploit code and no active exploitation have been reported at time of analysis.

Technical ContextAI

The affected component is Capella, a premium WordPress theme distributed by ThemeGoods (CPE cpe:2.3:a:themegoods:capella). The root cause is CWE-89 (Improper Neutralization of Special Elements used in an SQL Command), meaning user-supplied input reaches a database query without proper parameterization or escaping. In the WordPress theme context this typically stems from a theme-provided AJAX handler, shortcode, or query parameter passing raw input into $wpdb or a direct SQL statement, allowing an attacker to alter query logic and read data the query was never meant to return.

RemediationAI

No vendor-released patch version is identified in the available data, so the primary action is to consult the Patchstack advisory (https://patchstack.com/database/wordpress/theme/capella/vulnerability/wordpress-capella-theme-2-5-5-sql-injection-vulnerability) and upgrade to a fixed Capella release if ThemeGoods has published one beyond 2.5.5. Until a confirmed fixed version is applied, deploy a WAF or WordPress virtual-patching rule (Patchstack itself offers this) to block SQL-injection payloads against the theme's endpoints; the trade-off is that generic WAF rules can produce false positives on legitimate query strings. As a stronger interim control, restrict or disable the specific vulnerable theme endpoint/AJAX action if it is non-essential, or switch to an unaffected theme, accepting the loss of Capella functionality. Rotating database credentials and forcing password resets is prudent if exposure is suspected, since confidentiality impact is High.