Skip to content
Sign in
4.3 Medium

CVE-2026-39627 Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control…

Description

Missing Authorization vulnerability in wproyal Ashe ashe allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Ashe: from n/a through <= 2.266.

Affected products and versions

Product Affected versions Fixed in
Ashe 2.266 earliest → 2.266 No fix stated

Other CVEs of Ashe

The 3 CVEs of Ashe →
CVE-2024-37478 Cross-Site Request Forgery (CSRF) vulnerability in wproyal Ashe ashe allows Cross Site Request Forgery.This issue… 4.3 Medium CVE-2024-9777 The Ashe theme for WordPress is vulnerable to Reflected Cross-Site Scripting due to the use of add_query_arg without… 6.1 Medium
Track this CVE