Mikado Themes WordPress Rosebud Theme Authorization Bypass Vulnerability Allowing Insecure Direct Object References

An authorization bypass vulnerability has been identified in the Mikado Themes WordPress Rosebud theme, specifically in versions through 1.4. This vulnerability allows for insecure direct object references (IDOR), enabling attackers to exploit improperly configured access control security levels.

Impact

Exploitation of this vulnerability could lead to unauthorized access to sensitive files or folders, allowing interaction with the database. The vulnerability bypasses authorization controls, potentially enabling users to access or manipulate data they should not be able to.