CVE-2026-25393

CVE-2026-25393 is a Missing Authorization / Broken Access Control vulnerability affecting the WordPress Hello FSE theme (Hello FSE) up to version 1.0.6. The publicly available documents from NVD, Red Hat, Patchstack, CVE listings, and Wordfence identify an Incorrectly Configured Access Control Se...

CVE-2026-25393 WordPress Hello FSE theme <= 1.0.6 - Broken Access Control vulnerability

Missing Authorization vulnerability in sparklewpthemes Hello FSE hello-fse allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Hello FSE: from n/a through = 1.0.6...

WordPress Hello FSE theme <= 1.0.6 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by 0xd4rk5id3 in WordPress Theme Hello FSE versions = 1.0.6...