Authorization Flaw in Kutethemes Biolife Theme Affects Multiple Versions
CVE-2026-39624

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Biolife
Vendor
CVE Published:
8 April 2026

What is CVE-2026-39624?

The Kutethemes Biolife theme is affected by a missing authorization vulnerability that leads to incorrectly configured access control security levels. This flaw allows attackers to exploit the theme, potentially compromising user data or unauthorized access to functionalities within the theme. The issue is present in versions up to and including 3.2.3, making it crucial for users to apply updates and review their security configurations.

Affected Version(s)

Biolife 0 <= 3.2.3

References

https://patchstack.com/database/Wordpress/Theme/biolife/v...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
.