CVE-2025-1295: Templines Elementor Helper Core <= 2.7 - Authenticated (Subscriber+) Privilege Escalation
Description
The Templines Elementor Helper Core plugin for WordPress is vulnerable to privilege escalation in all versions up to, and including, 2.7. This is due to allowing arbitrary user meta updates. This makes it possible for authenticated attackers, with Subscriber-level access and above, to update their role to Administrator. The vulnerability can only be exploited when the BuddyPress plugin is also installed and activated.
Classification
CVE ID: CVE-2025-1295
CVSS Base Severity: HIGH
CVSS Base Score: 8.8
CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Problem Types
CWE-269 Improper Privilege ManagementAffected Products
Vendor: Templines
Product: Templines Elementor Helper Core
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.04% (probability of being exploited)
EPSS Percentile: 8.99% (scored less or equal to compared to others)
EPSS Date: 2025-03-28 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-1295https://www.wordfence.com/threat-intel/vulnerabilities/id/8c5aa062-b9a2-4ddb-a5bf-4c8368218e85?source=cve
http://localhost:1337/wp-content/plugins/templines-helper-core/youzify/youzify.php#L3082