Authorization Bypass in Themify Builder Plugin for WordPress

CVE-2026-75027

What is CVE-2026-75027?

The Themify Builder plugin for WordPress is vulnerable due to improper authorization checks, allowing unauthenticated attackers to modify styling data of posts, including private and draft content. Attackers can exploit this flaw by supplying a crafted post ID and JSON payload to manipulate padding and margin properties. The nonce verification intended to protect these actions is exposed on all frontend pages, making it easily retrievable by any visitor, thus bypassing access controls.

References