CVE-2025-10915
Dreamer Blog <= 1.2 - Subscriber+ Arbitrary Plugin Installation
CVSS Score
9.8
EPSS Score
0.1%
EPSS Percentile
19th
The Dreamer Blog WordPress theme through 1.2 is vulnerable to arbitrary installations due to a missing capability check.
| Vendor | unknown |
| Product | dreamer blog |
| Published | Jan 13, 2026 |
| Last Updated | Apr 2, 2026 |
Stay Ahead of the Next One
Get instant alerts for unknown dreamer blog
Be the first to know when new critical vulnerabilities affecting unknown dreamer blog are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Unknown / Dreamer Blog
0 ≤ 1.2
References
Credits
Khaled Alenazi (Nxploited) WPScan