Description
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme | 1.0 – ≤ 2.17.3 | — |