Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

DesignThemes Directory Addon: Unauthorized Access to Admin Panels

CVE-2026-27386 · published 8 months ago
Summary

The DesignThemes Directory Addon has a security weakness that allows unauthorized users to access administrator panels. This affects the Addon if it's installed and used from version 1.0 up to and including 1.8. To fix the issue, update the DesignThemes Directory Addon to a newer version.

Original advisory text
Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe...
Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Directory Addon: from n/a through <= 1.8.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker partial control
Severity
7.5 High
Exploitation
<1% chance of attack within 30 days
Type
CWE-862Missing Authorization
Timeline
Published5 Mar 2026
Updated31 Oct 2026
First seen6 Mar 2026
Sources
CVE-2026-27386 · NVD
Track software like this
Free during beta