Art Theme for WordPress Missing Capability Check Vulnerability Allowing Unauthorized Theme Option Deletion

A vulnerability exists in the Art Theme for WordPress, in all versions through 3.12.2.3, due to a lack of proper capability checks in the 'arttheme_theme_option_restore' AJAX function. This flaw enables authenticated attackers with subscriber-level access or higher to delete specific theme options.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of theme options, which could disrupt the site's appearance or functionality.

Remediation

Users are advised to update the Art Theme to version 3.12.3 or later.