Mikado Themes Cocco WordPress Theme Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the Mikado Themes Cocco WordPress theme, specifically in versions through 1.5.1. This vulnerability allows for insecure direct object references (IDOR), enabling attackers to exploit improperly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or folders, interaction with the database, or general authorization bypass, allowing users to perform actions they are not permitted to.