Record status Published
Identifier year (not publication year) 2024
Source publication Apr 29, 2024
Source updated Apr 28, 2026
Imported by cveboard Oct 24, 2026
CNA source text (English) Broken Access Control vulnerability affecting multiple WordPress themes by Extend Themes
Missing Authorization vulnerability in Extend Themes Pathway, Extend Themes Hugo WP, Extend Themes Althea WP, Extend Themes Elevate WP, Extend Themes Brite, Extend Themes Colibri WP, Extend Themes Vertice.This issue affects Pathway: from n/a through 1.0.15; Hugo WP: from n/a through 1.0.8; Althea WP: from n/a through 1.0.13; Elevate WP: from n/a through 1.0.15; Brite: from n/a through 1.0.11; Colibri WP: from n/a through 1.0.94; Vertice: from n/a through 1.0.7.
Scoped product and version facts Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
Pathway
Vendor Extend Themes
Product Pathway
Platforms Unknown
Default status unaffected
Package pathway
Package collection https://wordpress.org/themes/
Pathway · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.15 1.0.16 → unaffected
Hugo WP
Vendor Extend Themes
Product Hugo WP
Platforms Unknown
Default status unaffected
Package hugo-wp
Package collection https://wordpress.org/themes/
Hugo WP · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.8 1.0.10 → unaffected
Althea WP
Vendor Extend Themes
Product Althea WP
Platforms Unknown
Default status unaffected
Package althea-wp
Package collection https://wordpress.org/themes/
Althea WP · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.13 1.0.16 → unaffected
Elevate WP
Vendor Extend Themes
Product Elevate WP
Platforms Unknown
Default status unaffected
Package elevate-wp
Package collection https://wordpress.org/themes/
Elevate WP · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.15 1.0.17 → unaffected
Brite
Vendor Extend Themes
Product Brite
Platforms Unknown
Default status unaffected
Package brite
Package collection https://wordpress.org/themes/
Brite · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.11 1.0.15 → unaffected
Colibri WP
Vendor Extend Themes
Product Colibri WP
Platforms Unknown
Default status unaffected
Package colibri-wp
Package collection https://wordpress.org/themes/
Colibri WP · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.94 1.0.99 → unaffected
Vertice
Vendor Extend Themes
Product Vertice
Platforms Unknown
Default status unaffected
Package vertice
Package collection https://wordpress.org/themes/
Vertice · Scoped product and version facts Version (version) Status (status) Version scheme (versionType) Exclusive end (lessThan) Inclusive end (lessThanOrEqual) Status changes (at → status) n/a affectedcustom Unavailable 1.0.7 1.0.11 → unaffected