9.8
Critical
CVE-2025-10915 The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check
Description
The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Dreamer Blog 1.2 | earliest → 1.2 | No fix stated |