PT-2026-81045 · WordPress · Style Kits

CVE-2026-27364

Published

2026-08-24

Updated

2026-08-26

CVSS v3.1

6.5

Medium

Vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Style Kits versions prior to 2.6.6

Description Broken Access Control allows a user with Subscriber privileges to perform unauthorized actions.

Recommendations Update Style Kits to version 2.6.6 or later.

Fix

Missing Authorization

Found an issue in the description? Have something to add? Feel free to write us 👾

CVE-2026-27364

Style Kits