Authorization Flaw in ThemeBees Orchid Store Product

CVE-2026-24612

What is CVE-2026-24612?

A Missing Authorization vulnerability has been identified in the ThemeBees Orchid Store, which leads to exploiting incorrectly configured access control security levels. This issue compromises the integrity of user permissions and allows unauthorized access to sensitive areas of the product. Users operating Orchid Store versions up to and including 1.5.15 are particularly vulnerable. It is essential for users and administrators to take immediate action to secure their installations against this potential exploitation.

References