Skip to main content

Gillion CVE-2026-66477

| EUVDEUVD-2026-49252 MEDIUM
Missing Authorization (CWE-862)
2026-07-27 Patchstack GHSA-qc98-4853-54h8
WordPress Authentication Bypass Gillion Wordpress Theme
5.3
CVSS 3.1 · Vendor: Patchstack
Share

Severity by source

Vendor (Patchstack) PRIMARY
5.3 MEDIUM
AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Primary rating from Vendor (Patchstack) · only source for this CVE.

CVSS VectorVendor: Patchstack

Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Unchanged
Confidentiality
None
Integrity
Low
Availability
None

Lifecycle Timeline

1
Analysis Generated
Jul 27, 2026 - 14:50 vuln.today

DescriptionCVE.org

Unauthenticated Broken Access Control in Gillion <= 4.13 versions.

AnalysisAI

Unauthenticated broken access control in the Gillion WordPress theme (versions ≤ 4.13) allows remote attackers to modify certain data without authentication, with no confidentiality or availability impact. The vulnerability, tracked as CVE-2026-66477, has a CVSS score of 5.3 (Low integrity). No known public exploit or active exploitation exists at this time.

Same weakness CWE-862 – Missing Authorization

View all
CVE-2023-52163 HIGH POC
8.8
CVE-2025-6205 CRITICAL POC
9.1
CVE-2025-20362 HIGH POC
8.6
CVE-2017-9232 CRITICAL POC
9.8
CVE-2023-6875 CRITICAL POC
9.8
CVE-2024-4898 CRITICAL POC
9.8
CVE-2023-32117 CRITICAL POC
9.8
CVE-2020-36719 CRITICAL POC
9.8

Same technique Authentication Bypass

View all
CVE-2023-22515 CRITICAL POC
9.8
CVE-2012-4681 CRITICAL POC
9.8
CVE-2013-2465 CRITICAL POC
9.8
CVE-2011-3544 CRITICAL POC
9.8
CVE-2022-40684 CRITICAL POC
9.8
CVE-2025-61882 CRITICAL POC
9.8
CVE-2024-0012 CRITICAL POC
9.3
CVE-2023-46805 HIGH POC
8.2

Share

CVE-2026-66477 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy