Design Scuole Italia <= 2.18.1 - Unauthenticated Arbitrary File Donwload
high
The design-scuole-wordpress-theme plugin for WordPress is vulnerable to Directory Traversal in versions 2.6.0 to 2.18.1. This makes it possible for unauthenticated attackers to read the contents of arbitrary files on the server, which can contain sensitive information.
- CVSS:
- 7.5
(Wordfence)
- Affected:
- 2.6.0 – 2.18.1
- Fix:
- No patched version reported
- Disclosed:
- Sep 15, 2026
CVE-2026-87791 on NVD →
Design Scuole Italia <= 2.18.2 - Reflected Cross-Site Scripting
medium
The design-scuole-wordpress-theme plugin for WordPress is vulnerable to Reflected Cross-Site Scripting in versions 1.0 to 2.18.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully...
- CVSS:
- 6.1
(Wordfence)
- Affected:
- 1.0 – 2.18.2
- Fix:
- No patched version reported
- Disclosed:
- Sep 15, 2026
CVE-2026-87793 on NVD →
Design Scuole Italia <= 2.17.3 - Missing Authorization
medium
The design-scuole-wordpress-theme plugin for WordPress is vulnerable to unauthorized access due to a missing capability check on a function in versions 1.0 to 2.17.3. This makes it possible for unauthenticated attackers to perform an unauthorized action.
- CVSS:
- 5.3
(Wordfence)
- Affected:
- 1.0 – 2.17.3
- Fix:
- No patched version reported
- Disclosed:
- Sep 15, 2026
CVE-2026-87792 on NVD →
Design Scuole Italia <= 2.17.3 - Open Redirect
medium
The design-scuole-wordpress-theme plugin for WordPress is vulnerable to Open Redirect in versions 1.0 to 2.17.3. This is due to insufficient validation on the redirect url supplied. This makes it possible for unauthenticated attackers to redirect users to potentially malicious sites if they can successfully trick them...
- CVSS:
- 4.7
(Wordfence)
- Affected:
- 1.0 – 2.17.3
- Fix:
- No patched version reported
- Disclosed:
- Sep 15, 2026
CVE-2026-89307 on NVD →
Protect your WordPress site
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free
← Back to the vulnerability database