Missing Authorization vulnerability in PenciDesign Soledad

CVE-2024-31367

Summary

A missing authorization vulnerability was identified in the PenciDesign Soledad Theme, affecting versions from an unspecified release up to 8.4.2. This flaw allows unauthorized users to bypass access controls, potentially enabling them to exploit privileged functions. It poses a significant risk to websites utilizing this theme by compromising sensitive areas without appropriate verification. Site administrators are encouraged to review their configurations and apply security measures to mitigate the impacts of this vulnerability.

References