CVE-2026-22343

HighCVSS 8.6

Published: 17/06/2026(UTC)Updated: 25/10/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.26%

18th percentile - higher than 18% of all known CVEs

Summary

Versions of the WordPress Dating Theme up to 11.2.0 have an unauthenticated broken access control vulnerability that may allow attackers to access resources they should not have access to.

Risk Assessment

Organizations using this theme may be exposed to unauthorized access to sensitive data, potentially leading to a loss of confidentiality and integrity of information.

Recommendation

It is recommended to update the WordPress Dating Theme to the latest version to mitigate this security vulnerability.

Other vulnerabilities in WordPress Dating Theme

CVE-2026-22342High
An unauthenticated Cross Site Request Forgery (CSRF) vulnerability exists in WordPress Dating Theme versions <= 11.2.0. An attacker can exploit this vulnerability to perform unauthorized actions on behalf of users.

Original NVD description (English source)

Unauthenticated Broken Access Control in WordPress Dating Theme <= 11.2.0 versions.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS