CVE-2026-39714

Missing Authorization vulnerability in G5Theme G5Plus April g5plus-april allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects G5Plus April: from n/a through <= 6.8.

Score

CVSS 3.1 5.3 Medium

Status

Deferred - audit@patchstack.com

Published

2026-04-08

Last modified

2026-04-29

Weaknesses

CWE-862

Affected products

• G5plus April (G5theme)

References

• https://patchstack.com/database/Wordpress/Theme/g5plus-april/vulnerability/wordpress-g5plus-april-theme-6-8-broken-acce…