Powerlift
Monthly
Missing authorization in the Powerlift theme for WordPress allows authenticated attackers with low privileges to bypass access controls and perform unauthorized modifications to theme data. The vulnerability affects all versions prior to 3.2.1 and requires only a valid WordPress user account to exploit. No active exploitation or public exploit code has been identified, and the EPSS score suggests low real-world exploitation probability.
Missing authorization in the Powerlift theme for WordPress allows authenticated attackers with low privileges to bypass access controls and perform unauthorized modifications to theme data. The vulnerability affects all versions prior to 3.2.1 and requires only a valid WordPress user account to exploit. No active exploitation or public exploit code has been identified, and the EPSS score suggests low real-world exploitation probability.