---
id: CVE-2025-59134
title: >-
  Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law,
  Visa services support, Migration Agent Consulting immiex allows Privilege
  Escalation.This issue affects Sale! Immigration law, Visa services support,
  Migratio…
summary: >-
  Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law,
  Visa services support, Migration Agent Consulting immiex allows Privilege
  Escalation.This issue affects Sale! Immigration law, Visa services support,
  Migratio…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-266
published: '2025-12-18'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T23:10:00.237'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-59134'
references:
  - url: >-
      https://patchstack.com/database/Wordpress/Theme/immiex/vulnerability/wordpress-sale-immigration-law-visa-services-support-migration-agent-consulting-theme-1-5-8-privilege-escalation-vulnerability?_s_id=cve
    label: audit@patchstack.com
tags:
  - nvd
epss: 0.00365
epssPercentile: 0.2788
ingestedAt: '2026-09-30T23:29:32.500Z'
---

## Overview

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through <= 1.5.8.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.