CVE-2026-27364

Subscriber Broken Access Control in Style Kits <= 2.6.5 versions.

Credits

Que Thanh Tuan | Patchstack Bug Bounty Program

References

https://patchstack.com/database/wordpress/plugin/analogwp-templates/vulnerability/wordpress-style-kits-plugin-2-6-5-broken-access-control-vulnerability-2?_s_id=cve