CVE-2026-39714

MediumCVSS 5.3

Published: 08/04/2026(UTC)Updated: 24/07/2026(UTC)Translated: 25/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.19%

9th percentile - higher than 9% of all known CVEs

Summary

Missing authorization in the G5Plus April theme (g5plus-april) allows exploiting incorrectly configured access control security levels. The vulnerability affects versions up to 6.8 inclusive.

Risk Assessment

Unauthorized users may gain access to functions or data that should be protected, potentially leading to confidentiality or integrity breaches.

Recommendation

It is recommended to update the G5Plus April theme to the latest available version that fixes this vulnerability.

Original NVD description (English source)

Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: from n/a through <= 6.8.