design-scuole-wordpress-theme vulnerabilities

2 known vulnerabilities in design-scuole-wordpress-theme from Developers Italia. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.7 High severity

  design-scuole-wordpress-theme: Exposure of Sensitive Information to an Unauthorized Actor

  CVE-2026-87792Sep 15, 2026Developers Italia

  The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users

• 8.7 High severity

  design-scuole-wordpress-theme: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-87791Sep 15, 2026Developers Italia

  A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server proce