Laborator Kalium WordPress Theme Broken Access Control Vulnerability

Vulnerability

A missing authorization vulnerability has been identified in the Laborator Kalium WordPress theme, specifically in versions through 3.18.3. This vulnerability allows an unprivileged user to perform actions that require higher privileges, due to a lack of proper authorization checks.

Impact

Exploitation of this vulnerability could enable an unprivileged user to execute actions reserved for higher privileged users, potentially leading to unauthorized changes or access within the WordPress site.

Added: Sep 9, 2025, 6:58 PM
Updated: Sep 9, 2025, 6:58 PM

Vulnerability Rating

Custom Algorithm
spread
0.0
impact
5.0
exploitability
7.4
remediation
0.0
relevance
0.5
threat
0.0
urgency
2.9
incentive
5.8

Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.