CVE-2026-66647

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

EUVD-2026-63301

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

CVE-2026-66647 WordPress Homlisti theme <= 3.1.2 - Broken Access Control vulnerability

Subscriber Broken Access Control in Homlisti = 3.1.2 versions...

CVE-2026-66647

CVE-2026-66647 is a Broken Access Control vulnerability in the WordPress Homlisti theme , affecting versions 3.1.2 and below . The flaw allows a user with Subscriber privileges to perform actions beyond their intended access level, resulting in a high integrity impact (CVSS 3.1 score: 6.5 MEDIUM ...

PT-2026-78974

Name of the Vulnerable Software and Affected Versions Homlisti versions prior to 3.1.3 Description Broken access control exists for subscribers, allowing unauthorized access or actions. Recommendations Update to a version newer than 3.1.2...