WordPress Travel Monster Theme Broken Access Control Vulnerability
Vulnerability
A broken access control vulnerability has been identified in the WordPress Travel Monster theme, specifically in versions through 1.3.3. This vulnerability allows unauthorized users to perform actions that require higher privileges, due to missing authorization checks in certain functions.
Impact
Exploitation of this vulnerability could enable an unauthorized user to execute actions reserved for higher privileged users, potentially leading to unauthorized changes or access within the application.
Added: Jan 23, 2026, 3:34 PM
Updated: Jan 23, 2026, 10:50 PM
Vulnerability Rating
Custom Algorithm
spread
0.0impact
2.5exploitability
7.4remediation
0.0relevance
2.3threat
0.0urgency
2.9incentive
4.2Our algorithm analyzes dozens of metrics to generate these 8 key vulnerability categories, which are then combined to calculate the overall risk score.