Teardrop - Fullscreen Photography Theme | Portfolio <= 1.8.5 - Arbitrary Options Update
highThe Teardrop theme for WordPress is vulnerable to arbitrary option updates in versions up to, and including, 1.8.5. This is due to improper permission checks. This makes it possible for authenticated attackers to modify otherwise restricted options.
- CVSS:
- 8.8
- Affected:
- up to 1.8.5
- Fixed in:
- 1.8.6
- Disclosed:
- Jun 26, 2015