Permalink
CVE-2025-60165
4.3 MEDIUM
- CVSS version (CVSS): 3.1
- Attack Vector (AV): Network (N)
- Attack Complexity (AC): Low (L)
- Privileges Required (PR): Low (L)
- User Interaction (UI): None (N)
- Scope (S): Unchanged (U)
- Confidentiality (C): None (N)
- Integrity (I): Low (L)
- Availability (A): None (N)
- Modified Attack Vector (MAV): Network (N)
- Modified Attack Complexity (MAC): Low (L)
- Modified Privileges Required (MPR): Low (L)
- Modified User Interaction (MUI): None (N)
- Modified Confidentiality (MC): None (N)
- Modified Scope (MS): Unchanged (U)
- Modified Integrity (MI): Low (L)
- Modified Availability (MA): None (N)
by @LeSuisse Activity log
- Created suggestion
- @LeSuisse dismissed
WordPress Frames Theme <= 1.5.7 - Broken Access Control Vulnerability
Missing Authorization vulnerability in HaruTheme Frames allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Frames: from n/a through 1.5.7.
References
Affected products
frames
- =<1.5.7
Matching in nixpkgs
pkgs.framesh
Native web3 interface that lets you sign data, securely manage accounts and transparently interact with dapps via web3 protocols like Ethereum and IPFS
pkgs.haskellPackages.javelin-frames
Type-safe data frames based on higher-kinded types
pkgs.python312Packages.llm-video-frames
LLM plugin to turn a video into individual frames
pkgs.python313Packages.llm-video-frames
LLM plugin to turn a video into individual frames
Package maintainers
-
@0xnook Tom Nook <0xnook@protonmail.com>
-
@philiptaron Philip Taron <philip.taron@gmail.com>