EUVD-2026-63301
GHSA-325p-qwxx-xpxg
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
Network-accessible WordPress endpoint requiring only a subscriber account (PR:L); missing authorization grants unauthorized write capability (I:H); no confidentiality or availability impact observed.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
1DescriptionCVE.org
Subscriber Broken Access Control in Homlisti <= 3.1.2 versions.
AnalysisAI
Broken Access Control in the Homlisti WordPress real estate theme (versions ≤ 3.1.2) allows authenticated subscribers to perform unauthorized write operations that should be restricted to higher-privileged roles. The CVSS vector (PR:L, I:H, AC:L) confirms low-privileged network-accessible exploitation with high integrity impact and no complexity barrier once a subscriber account is held. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires the attacker to hold a valid WordPress Subscriber account on the target site - either obtained via open user registration or through credential compromise. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 6.5 Medium score is supported by the vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N: the attack is network-accessible, requires no complexity, and demands only a subscriber-level account, which on WordPress sites with open registration is trivially obtainable. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update the Homlisti theme to a version released after 3.1.2; the exact patched version number is not independently confirmed from available data - consult the Patchstack advisory at https://patchstack.com/database/wordpress/theme/homlisti/vulnerability/wordpress-homlisti-theme-3-1-2-broken-access-control-vulnerability and the Radiustheme changelog for the specific fix release. … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
Same weakness CWE-862 – Missing Authorization
View allSame technique Authentication Bypass
View allShare
External POC / Exploit Code
Leaving vuln.today