Simpolio [simpolio] < 100 (unfixed + closed)
unknown[en] The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.
- Affected:
- up to 100
- Fix:
- No patched version reported
- Disclosed:
- Oct 10, 2019
theme
3 known security issues reported for the Simpolio WordPress theme. Most recent disclosed Oct 10, 2019.
Running Simpolio on your site? Check whether your installed version is affected.
Scan your site free[en] The Simpolio theme 1.3.2 for WordPress has insufficient restrictions on option updates.
The Simpolio - Fullscreen Portfolio & Blog HTML Theme theme for WordPress is vulnerable to arbitrary option updates due to a missing capability check on the of_ajax_post_action AJAX action in versions up to, and including, 2.1. This makes it possible for unauthenticated attackers to edit arbitrary site options which ca...
Because of this privilege escalation vulnerability, the attackers can update options and execute commands on the server. Update the theme.
Run a free security scan to detect vulnerable plugins and themes, exposed files, and malware — no plugin install, no signup.
Scan your site free