Mikado Themes WordPress Holmes Theme Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the Mikado Themes WordPress Holmes theme, specifically in versions through 1.7. This vulnerability allows for insecure direct object references (IDOR), enabling attackers to exploit improperly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or folders, allowing interaction with the database. The vulnerability could also be used to bypass authentication and authorization mechanisms.