CVE-2026-39622

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.21%

12th percentile - higher than 12% of all known CVEs

Summary

The Education Base theme for WordPress has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 3.0.8.

Risk Assessment

An attacker can gain unauthorized access to theme settings or content, potentially leading to website defacement or data theft.

Recommendation

It is recommended to update the Education Base theme to the latest version that eliminates this vulnerability.

Original NVD description (English source)

Missing Authorization vulnerability in acmethemes Education Base education-base allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Education Base: from n/a through <= 3.0.8.