CVE-2026-65500
HighCVSS 7.5Summary
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain an unauthenticated Broken Access Control vulnerability. An attacker can gain unauthorized access to functions or data.
Risk Assessment
The risk includes the possibility of unauthorized access to sensitive data or administrative functions, potentially leading to privilege escalation or information disclosure.
Recommendation
It is recommended to update the Manual theme to a version above 7.5.4 that includes a fix for the Broken Access Control vulnerability.
Other vulnerabilities in Manual - Documentation, Knowledge Base & Education WordPress Theme
See all- CVE-2026-65522Medium
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain a Cross Site Scripting (XSS) vulnerability exploitable by contributors. A contributor can inject malicious JavaScript code.
- CVE-2026-65511High
The Manual - Documentation, Knowledge Base & Education WordPress Theme versions up to 7.5.4 contain an unauthenticated Cross-Site Scripting (XSS) vulnerability. An attacker can inject malicious JavaScript code.
Original NVD description (English source)
Unauthenticated Broken Access Control in Manual - Documentation, Knowledge Base & Education WordPress Theme <= 7.5.4 versions.