CVE-2026-87792
HighCVSS 8.7Summary
The "Design Scuole Italia" WordPress theme is affected by multiple authorization bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.
Risk Assessment
An unauthenticated attacker can access restricted content and personal data of registered users, leading to a confidentiality breach.
Recommendation
Update the "Design Scuole Italia" theme to a patched version or disable the vulnerable dsi_pdf_generator and dsi_csv_generator functions. Consider restricting access to the /circolare/feed/ RSS feed.
Other vulnerabilities in Design Scuole Italia WordPress theme
See all- CVE-2026-89307Medium
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).
- CVE-2026-87793Medium
The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file, allowing an unauthenticated attacker to execute arbitrary JavaScript in a victim's browser via a crafted URL containing a malicious archive parameter.
- CVE-2026-87791High
A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.
Original NVD description (English source)
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.