Design Scuole Wordpress Theme
Approved changes feed: RSS · Atom
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Developers Italia (9d239165-f866-588c-bc24-ab20e43a0ff9) |
|---|---|
| Product | Design Scuole Wordpress Theme (78b4a9d3-99c7-5ea5-89f4-5dd6b09a9ec9) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-89307 |
vulnerable | 2026-09-16 04:34:09.581628 |
HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).
Published: 2026-09-15T15:23:40.292Z
Updated: 2026-09-15T17:31:45.292Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-87792 |
vulnerable | 2026-09-16 04:33:01.583142 |
Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.
Published: 2026-09-15T15:20:17.877Z
Updated: 2026-09-15T17:31:45.662Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-87793 |
vulnerable | 2026-09-16 04:33:01.505430 |
Reflected XSS in WordPress theme design-scuole-wordpress-theme
The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file,
allowing an unauthenticated attacker to execute arbitrary JavaScript in
a victim's browser via a crafted URL containing a malicious archive parameter.
Published: 2026-09-15T15:21:47.322Z
Updated: 2026-09-15T17:31:45.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-87791 |
vulnerable | 2026-09-16 04:33:01.245048 |
Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme
A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.
Published: 2026-09-15T15:10:37.613Z
Updated: 2026-09-15T17:31:45.818Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.