Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 2

Export CSV
CVE-2026-87792

Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme

The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.

CVSS 4.0 · 8.7 High EPSS < 1% KEV · Not listed
Vendors
Developers Italia Wordpress-extensions
Products
Design-scuole-wordpress-theme Design-scuole-wordpress-theme
CVE-2026-87793

Reflected XSS in WordPress theme design-scuole-wordpress-theme

The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter.

CVSS 4.0 · 5.1 Medium EPSS < 1% KEV · Not listed
Vendors
Developers Italia Wordpress-extensions
Products
Design-scuole-wordpress-theme Design-scuole-wordpress-theme