CVE-2026-40809

MEDIUM NVD

CVSS Score 6.5

Severity MEDIUM

Published Jun 16, 2026

Vendor unknown

Description

Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects Metro Magazine: from n/a through 1.4.1.

References

https://patchstack.com/database/wordpress/theme/metro-magazine/vulnerability/wordpress-metro-magazine-theme-1-4-1-broken-access-control-vulnerability?_s_id=cve