Medium · 5.3 CVE-2025-27013 EUVD-2025-4774GHSA-v935-x4wr-fq98

WordPress MediCenter theme < 14.7 - Sensitive Data Exposure vulnerability

Published Feb 18, 2025 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: QuanticaLabs Product: MediCenter - Health Medical Clinic

Description

Missing Authorization vulnerability in QuanticaLabs MediCenter - Health Medical Clinic medicenter allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects MediCenter - Health Medical Clinic: from n/a through < 14.7.

Affected products

Vendor	Product	Affected	Fixed
QuanticaLabs	MediCenter - Health Medical Clinic	≤ 14.7	—

References

https://patchstack.com/database/Wordpress/Theme/medicenter/vulnerability/wordpress-medicenter-theme-14-7-sensitive-data-exposure-vulnerability?_s_id=cve vdb-entry