Skip to content
OpenAdvisories
High · 7.5 CVE-2026-22383 EUVD-2026-8377GHSA-wrqv-46c5-q67w

WordPress PawFriends - Pet Shop and Veterinary WordPress theme theme <= 1.3 - Insecure Direct Object References (IDOR) vulnerability

Published Feb 20, 2026 · Updated Apr 28, 2026 · Assigned by Patchstack

Vendor: Mikado-Themes Product: PawFriends - Pet Shop and Veterinary WordPress Theme Category: Web / CMS

Description

Authorization Bypass Through User-Controlled Key vulnerability in Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme pawfriends allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects PawFriends - Pet Shop and Veterinary WordPress Theme: from n/a through <= 1.3.

Affected products

VendorProductAffectedFixed
Mikado-Themes PawFriends - Pet Shop and Veterinary WordPress Theme ≤ 1.3 —

References