What is the CVSS score of CVE-2025-5805?

CVE-2025-5805 has a CVSS 3.1 base score of 6.5 (Medium). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N. EPSS exploitation probability: 0.1%.

Which versions of Wordpress Theme are affected by CVE-2025-5805?

A high-severity authorization vulnerability in Ninetheme Electron (versions through 1.8.2) could allow attackers to bypass access controls and gain unauthorized access to sensitive functions or data.

How to fix or mitigate CVE-2025-5805?

Within 24 hours: Identify all systems running Ninetheme Electron versions <= 1.8.2 and assess exposure; evaluate compensating controls listed below. Within 7 days: Implement network segmentation to restrict Electron application access and deploy input validation controls; document all affected systems and risk acceptance decisions. Within 30 days: Contact Ninetheme for patch availability and testing timelines; migrate or upgrade affected systems as patches become available; conduct security review of access control configurations across all Electron instances.

Wordpress Theme CVE-2025-5805

MEDIUM

Missing Authorization (CWE-862)

2026-01-22 audit@patchstack.com

WordPress Authentication Bypass Wordpress Theme

6.5

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

6.5 MEDIUM

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

High

Availability

None

Lifecycle Timeline

Severity Changed

Apr 23, 2026 - 15:43 NVD

HIGH MEDIUM

CVSS changed

Apr 23, 2026 - 15:43 NVD

8.8 (HIGH) 6.5 (MEDIUM)

Analysis Generated

Mar 12, 2026 - 21:54 vuln.today

CVE Published

Jan 22, 2026 - 17:15 nvd

HIGH 8.8

DescriptionCVE.org

Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through <= 1.8.2.

AnalysisAI

Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through <= 1.8.2. [CVSS 8.8 HIGH]

Technical ContextAI

Classified as CWE-862 (Missing Authorization). Affects Ninetheme Electron electron. Missing Authorization vulnerability in Ninetheme Electron electron allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Electron: from n/a through <= 1.8.2.