CVE-2025-25225: Hikashop

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

A privilege escalation vulnerability in the Hikashop component versions 1.0.0-5.1.3 for Joomla allows authenticated attackers (administrator) to escalate their privileges to Super Admin Permissions.

Affected products

• Hikashop Hikashop: from 1.0.0, up to and including 5.1.3

Published 2025-03-15. Last modified 2026-06-17.