Mikado Themes Curly WordPress Theme Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the Mikado Themes Curly WordPress theme, specifically in versions through 3.3. This vulnerability allows for Insecure Direct Object References (IDOR), enabling attackers to exploit improperly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or folders, allowing interaction with the database. The vulnerability arises from Insecure Direct Object References, which could enable a malicious actor to bypass authorization and access restricted resources.