LiquidThemes Themes <= Various Versions - Missing Authorization to Authenticated (Subscriber+) All Plugins Deactivated

4.3 CVSS

Vulnerability Description

Multiple plugins and/or themes for WordPress by LiquidThemes are vulnerable to unauthorized access due to a missing capability check on the liquid_reset_wordpress_before AJAX in various versions. This makes it possible for authenticated attackers, with Subscriber-level access and above, to deactivate all of a site's plugins. While we escalated this to Envato after not being able to establish contact, it appears the developer added a nonce check, however that is not sufficient protection as the nonce is exposed to all users with access to the dashboard.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-0951

Check My Exposure

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

Lucio Sá

References

More from LiquidThemes

View All →

CVE-2025-68065

WordPress Hub Core plugin < 6.0.2 - Local File Inclusion vulnerability

High 7.5

CVE-2025-30933

WordPress LogisticsHub theme <= 1.1.6 - Arbitrary File Upload Vulnerability

Critical 10

CVE-2025-26927

WordPress AI Hub plugin <= 1.3.7 - Arbitrary File Upload vulnerability

Critical 10

CVE-2025-1093

AIHub <= 1.3.7 - Unauthenticated Arbitrary File Upload in generate_image

Critical 9.8

Affected Vendor

LiquidThemes

View all reports →

Affected Software

AI Hub - Startup & Technology WordPress Theme, Hub - Responsive Multi-Purpose WordPress Theme, ArcHub - Architecture and Interior Design WordPress Theme

Vulnerable Versions: