PT-2026-81294

CVE-2026-77997

·

Published

2026-08-25

·

Updated

2026-09-23

Description by

CVSS 4.0
5.1
Medium
MetricsAV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/S:N/AU:N
Name of the Vulnerable Software and Affected Versions YOOtheme Pro versions 1.0.0 through 5.0.41
Description A missing access check allows authenticated users with com template editing permissions to access information about arbitrary modules, even if they lack the required com modules permissions.
Recommendations Update YOOtheme Pro to a version later than 5.0.41.
Exploitability
Fix
Impacts
Vendors
Affected products
Weakness enumeration
CWE-284: Improper Access Control
Related identifiers
CVE-2026-77997
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com