CVE-2025-69344

Unknown Unknown - Not Provided

Missing Authorization in ThemeHunk Oneline Lite Enables Unauthorized Access

Publication date: 2026-01-07

Last updated on: 2026-04-23

Assigner: Patchstack

Description

Missing Authorization vulnerability in themehunk Oneline Lite oneline-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Oneline Lite: from n/a through <= 6.6.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-01-07

Last Modified

2026-04-23

Generated

2026-07-06

AI Q&A

2026-01-07

EPSS Evaluated

2026-07-05

NVD

CVE-2025-69344

EUVD

EUVD-2026-1261

Affected Vendors & Products

Vendor	Product	Version / Range
themehunk	oneline_lite	to 6.6 (inc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-862	The product does not perform an authorization check when an actor attempts to access a resource or perform an action.

Attack-Flow Graph

Executive Summary

CVE-2025-69344 is a broken access control vulnerability in the WordPress Oneline Lite Theme (up to version 6.6). It occurs due to missing authorization, authentication, or nonce token checks in certain functions, which allows users with low privileges (subscriber-level) to perform actions that should be restricted to higher-privileged roles such as developers. [1]

Impact Analysis

This vulnerability allows unprivileged users to perform actions reserved for higher-privileged roles, potentially leading to unauthorized changes or actions within the WordPress theme. However, the impact is considered low with a CVSS score of 4.3, and the risk of exploitation is not significant. [1]

Mitigation Strategies

To mitigate this vulnerability, you should update the WordPress Oneline Lite Theme to version 6.7 or later, as this version contains the fix for the broken access control issue. [1]

Compliance Impact

The provided information does not specify any direct impact of this vulnerability on compliance with common standards and regulations such as GDPR or HIPAA. [1]

Hi! I’m here to help you understand CVE-2025-69344. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70