Mikado Themes Justicia WordPress Theme Authorization Bypass Vulnerability Allowing Insecure Direct Object References

A vulnerability allowing authorization bypass through user-controlled keys has been identified in the Mikado Themes WordPress theme 'Justicia', specifically in versions through 1.2. This issue arises from incorrectly configured access control security levels, potentially leading to insecure direct object references (IDOR).

Impact

Exploitation of this vulnerability could allow unauthorized users to access restricted objects or resources, bypassing normal authorization mechanisms. This could involve accessing sensitive files, folders, or database interactions that should be protected.