theme

Educenter Vulnerabilities

2 known security issues reported for the Educenter WordPress theme. Most recent disclosed Jul 25, 2025.

2 medium

Running Educenter on your site? Check whether your installed version is affected.

Scan your site free

Educenter <= 1.6.2 - Authenticated (Contributor+) Stored Cross-Site Scripting

medium

The Educenter theme for WordPress is vulnerable to Stored Cross-Site Scripting via the Circle Counter Block in all versions up to, and including, 1.6.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbit...

CVSS:
6.4
Affected:
up to 1.6.2
Fixed in:
1.6.3
Disclosed:
Jul 25, 2025

CVE-2025-5529 on NVD →

Educenter <= 1.5.7 - Missing Authorization via activate_plugin

medium

The Educenter theme for WordPress is vulnerable to unauthorized plugin activation due to a missing capability check on the activate_plugin function called via an AJAX action in versions up to, and including, 1.5.7. This makes it possible for authenticated attackers, with subscriber-level access and above, to activate a...

CVSS:
4.3
Affected:
up to 1.5.7
Fixed in:
1.5.8
Disclosed:
Apr 14, 2023

CVE-2023-30480 on NVD →

Protect your WordPress site

Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.

Scan your site free

← Back to the vulnerability database