---
id: CVE-2025-59134
title: >-
  Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law,
  Visa services support, Migration Agent Consulting immiex allows Privilege
  Escalation.This issue affects Sale! Immigration law, Visa services support,
  Migratio…
summary: >-
  Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law,
  Visa services support, Migration Agent Consulting immiex allows Privilege
  Escalation.This issue affects Sale! Immigration law, Visa services support,
  Migratio…
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cwe:
  - CWE-266
published: '2025-12-18'
updated: '2026-10-05'
sourceUpdated: '2026-10-05T14:10:00.267'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2025-59134'
references:
  - url: >-
      https://patchstack.com/database/Wordpress/Theme/immiex/vulnerability/wordpress-sale-immigration-law-visa-services-support-migration-agent-consulting-theme-1-5-8-privilege-escalation-vulnerability?_s_id=cve
    label: audit@patchstack.com
tags:
  - nvd
epss: 0.0034
epssPercentile: 0.27259
ingestedAt: '2026-09-30T23:29:32.500Z'
---

## Overview

Incorrect Privilege Assignment vulnerability in Jthemes Sale! Immigration law, Visa services support, Migration Agent Consulting immiex allows Privilege Escalation.This issue affects Sale! Immigration law, Visa services support, Migration Agent Consulting: from n/a through <= 1.5.8.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.