Authorization Flaw in Bard Theme by WordPress
CVE-2025-63018

4.3MEDIUM

Key Information:

Vendor

WordPress
Status
Bard
Vendor
CVE Published:
22 January 2026

What is CVE-2025-63018?

A missing authorization vulnerability in the Bard theme from WordPress has been identified, impacting versions from n/a up to 2.229. This flaw arises from an incorrectly configured access control mechanism, which may allow unauthorized users to access restricted resources. Administrators using this theme are advised to evaluate their access controls and update to a secure version to mitigate potential risks.

Affected Version(s)

Bard 0 <= 2.229

References

https://patchstack.com/database/Wordpress/Theme/bard/vuln...
vdb-entry

CVSS V3.1

Score:
4.3
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

Mohamad Fattyr | Patchstack Bug Bounty Program
.