Access Control Vulnerability in Flipmart Theme by CKThemes
CVE-2026-39716

5.3MEDIUM

Key Information:

Vendor

WordPress
Status
Flipmart
Vendor
CVE Published:
8 April 2026

What is CVE-2026-39716?

The Flipmart theme developed by CKThemes is susceptible to a significant access control vulnerability due to missing authorization mechanisms. This security flaw allows unauthorized users to exploit improperly configured access control levels, potentially leading to unauthorized access to sensitive functionalities within the theme. Users of Flipmart versions from not applicable to 2.8 are advised to review their setups and apply necessary updates to safeguard against this vulnerability.

Affected Version(s)

Flipmart 0 <= 2.8

References

https://patchstack.com/database/Wordpress/Theme/flipmart/...
vdb-entry

CVSS V3.1

Score:
5.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
None
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

João Pedro S Alcântara (Kinorth) | Patchstack Bug Bounty Program
.