CVE-2026-42706: WordPress DK theme <= 3.2.1 - Broken Access Control vulnerability
Published Oct 10, 2026
·Updated
Unauthenticated Broken Access Control in DK <= 3.2.1 versions.
Affected Software
1 affected component
WordPress DK theme<=3.2.1
Event History
Oct 10, 2026
CVE Published
via MITRE·07:35 PM
Data Sourced
via MITRE·07:35 PM
DescriptionSeverityWeakness
Data Sourced
via NVD·08:16 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated, so an attacker does not need a WordPress account or prior privileges. The network attack vector and no-user-interaction rating indicate it may be reachable remotely without victim action.
2
What security impact is identified?
The reported impact is high integrity impact, meaning successful exploitation could allow unauthorized modification of data or content. No confidentiality or availability impact is listed in the supplied vector.
3
Which installations are affected?
WordPress sites using the DK theme at version 3.2.1 or earlier are identified as affected. The provided data does not state whether any particular configuration or feature must be enabled.