CVE-2026-87792 — Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an una…
Published: 2026-09-15 · CVSS: 8.7 · CVSS 4.0
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7