CVE-2025-25225

CVE-2025-25225: Extension - hikashop.com - Privilege escalation vulnerability Hikashop component version 1.0.0 - 5.1.3 for Joomla

Vendor Hikashop.com

Product Hikashop component for Joomla

Weakness CWE-284

Published March 15, 2025

Last update March 19, 2025

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions.

Key dates

02Disclosure timeline

March 15, 2025 CVE published

March 19, 2025 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2025-25225 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/284.html AskarLabs — CWE-284 write-up Improper Access Control

Related vulnerabilities

04Related CVE

CVE-2026-48906 Extension - tassos.gr - Arbitrary File Deletion in Novarain/Tassos Framework < 6.1.0 for Joomla CVE-2024-12370 WP Hotel Booking <= 2.1.5 - Missing Authorization CVE-2026-23899 Joomla! Core - [20260306] - Improper access check in webservice endpoints CVE-2024-13229 Rank Math SEO <= 1.0.235 - Missing Authorization to Authenticated (Contributor+) Arbitrary Schema Deletion CVE-2024-7429 Zotpress <= 7.3.12 - Missing Authorization