Medium · 4.3 CVE-2023-27456 EUVD-2023-31232GHSA-cw4w-742w-5qj9

WordPress Total theme <= 2.1.19 - Authenticated Arbitrary Plugin Activation

Published Dec 13, 2024 · Updated Apr 28, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in HashThemes Total allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total: from n/a through 2.1.19.

Affected products

Vendor	Product	Affected	Fixed
HashThemes	Total	≤ 2.1.19	—

References

https://patchstack.com/database/wordpress/theme/total/vulnerability/wordpress-total-theme-2-1-19-authenticated-arbitrary-plugin-activation?_s_id=cve vdb-entry