EUVD-2026-70975
GHSA-hfvc-f2r4-5ww6
Severity by source
AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L
Requires low-privilege WordPress account (PR:L); IDOR enables object modification/deletion only, no confidentiality breach (C:N), integrity and availability impacts both limited.
Primary rating from Vendor (Patchstack).
CVSS VectorVendor: Patchstack
Lifecycle Timeline
4DescriptionCVE.org
Authorization Bypass Through User-Controlled Key vulnerability in sc Internet Vivoo WP Rentals allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects WP Rentals: from n/a before 3.16.0.
AnalysisAI
Insecure Direct Object Reference (IDOR) in the WP Rentals WordPress theme (versions before 3.16.0) allows authenticated low-privileged users to manipulate user-controlled keys to access, modify, or delete rental objects-listings, bookings, or similar records-belonging to other platform users. The flaw, reported by Patchstack and classified as CWE-639, stems from the theme failing to verify server-side that the requesting user owns or is authorized to act on the referenced resource. …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires a valid WordPress account on the target site with at least subscriber-level (low-privilege) access, as confirmed by the PR:L metric in the CVSS vector - unauthenticated visitors cannot exploit this flaw. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | The CVSS 3.1 base score of 5.4 (Medium) with vector AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L is internally consistent: the attack is network-reachable, requires no complex preconditions, but mandates a valid low-privileged account, and produces only integrity and availability degradation with no confidentiality breach. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | Full exploit scenario with step-by-step reproduction available after sign-in. |
| Remediation | Update WP Rentals to version 3.16.0 or later, which is confirmed by Patchstack as the patched release addressing this IDOR (https://patchstack.com/database/wordpress/theme/wprentals/vulnerability/wordpress-wp-rentals-theme-3-16-0-insecure-direct-object-references-idor-vulnerability). … Detailed patch versions, workarounds, and compensating controls in full report. |
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Wordpress Theme
View allThe Newscrunch theme for WordPress is vulnerable to arbitrary file uploads due to a missing capability check in the news
The Mesmerize & Materialis themes for WordPress are vulnerable to authenticated options change in versions up to, and in
A vulnerability in posimyththemes Nexter nexter.0.3. Rated high severity (CVSS 8.5), this vulnerability is remotely expl
The Brilliance <= 1.2.7, Activello <= 1.4.0, and Newspaper X <= 1.3.1 themes for WordPress are vulnerable to Plugin Acti
Remote code execution in the dmcwebzone Airin Blog WordPress plugin (versions up to and including 1.6.1) is possible thr
search.php in the Nova Lite theme before 1.3.9 for WordPress allows Reflected XSS. Rated medium severity (CVSS 6.1), thi
Unrestricted Upload of File with Dangerous Type vulnerability in EPC AI Hub allows Upload a Web Shell to a Web Server.3.
Backdoor / malicious code implant in the Silk Themes 'Newspapers X' WordPress theme (versions 1.0.46 through 1.0.48) all
Critical unrestricted file upload vulnerability in NasaTheme Flozen that allows unauthenticated remote attackers to uplo
Remote code execution in LogisticsHub WordPress theme allows unauthenticated attackers to upload arbitrary files, includ
Farost Energia WordPress plugin allows unrestricted file upload enabling attackers to upload web shells and achieve remo
Unrestricted file upload in the Medcity WordPress theme before version 1.1.9 allows unauthenticated attackers to upload
Share
External POC / Exploit Code
Leaving vuln.today