The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report
The Vikinger theme for WordPress is vulnerable to privilege in all versions up to, and including, 1.9.30. This is due to insufficient user_meta restrictions in the 'vikinger_user_meta_update_ajax' function. This makes it possible for authenticated attackers, with Subscriber-level access and above, to escalate their privileges to Administrator-level.
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Vikinger Theme | — | Update vikinger theme to version 1.9.31, or a newer patched version | Dec 8, 2025 | Apr 24, 2025 |
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub