Monitor vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
7.5

DesignThemes Directory Addon: Unauthorized Access to Admin Panels

CVE-2026-27386
Summary

The DesignThemes Directory Addon has a security weakness that allows unauthorized users to access administrator panels. This affects the Addon if it's installed and used from version 1.0 up to and including 1.8. To fix the issue, update the DesignThemes Directory Addon to a newer version.

Original title
Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affe...
Original description
Missing Authorization vulnerability in designthemes DesignThemes Directory Addon designthemes-directory-addon allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects DesignThemes Directory Addon: from n/a through <= 1.8.
Vulnerability type
CWE-862 Missing Authorization
Published: 5 Mar 2026 · Updated: 13 Mar 2026 · First seen: 6 Mar 2026