Medium · 6.5 CVE-2026-40809 EUVD-2026-37058GHSA-57gx-7458-mhwq

WordPress Metro Magazine theme <= 1.4.1 - Broken Access Control vulnerability

Published Jun 16, 2026 · Updated Jun 16, 2026 · Assigned by Patchstack

Description

Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels.

This issue affects Metro Magazine: from n/a through 1.4.1.

Vendor	Product	Affected	Fixed
Rara Themes	Metro Magazine	≤ 1.4.1	—