CyberRota Analysis
AI-GeneratedThe "Design Scuole Italia" WordPress theme contains multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, enabling unauthenticated attackers to access restricted "Circolare" content and sensitive registered user data. The presence of an unauthenticated RSS feed at /circolare/feed/ further exacerbates the risk of exploitation. WordPress site administrators using this theme should prioritize patching to mitigate potential data breaches and unauthorized access.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.