CVE-2026-74021: WordPress Chaplin theme <= 2.6.8 - Broken Access Control vulnerability
Published Aug 20, 2026
·Updated
Unauthenticated Broken Access Control in Chaplin <= 2.6.8 versions.
Affected Software
1 affected component
WordPress Chaplin theme<=2.6.8
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
WordPress Chaplin themeto a version that resolves this vulnerability.Fixed in 2.6.8
Event History
Aug 20, 2026
CVE Published
via MITRE·12:06 PM
Data Sourced
via MITRE·12:06 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Who can exploit this issue?
The vulnerability is unauthenticated and has network attack vector, so an attacker does not need an account or user interaction to attempt exploitation against an affected site.
2
What versions are affected?
Chaplin theme versions 2.6.8 and earlier are identified as affected.
3
What is the potential impact?
The provided severity vector indicates high confidentiality impact, with no indicated integrity or availability impact.