Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
8 vulnerabilities by Developers Italia
CVE-2026-89307 (GCVE-0-2026-89307)
Vulnerability from nvd – Published: 2026-09-15 15:23 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme
Summary
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:16 UTC
CWE
- CWE-601 - URL redirection to untrusted site ('open redirect')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/italia/design-scuole-wordpress-theme | product |
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
1.0 , ≤ 2.17.3
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-89307",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:16:36.848070Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.292Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.17.3",
"status": "affected",
"version": "1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.17.3",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lorenzo Zarfati"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"Firma Circolare\" feature in the \"Design Scuole Italia\" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect)."
}
],
"value": "The \"Firma Circolare\" feature in the \"Design Scuole Italia\" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect)."
}
],
"impacts": [
{
"capecId": "CAPEC-98",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-98 Phishing"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-601",
"description": "CWE-601 URL redirection to untrusted site (\u0027open redirect\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:23:40.292Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
},
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-89307",
"datePublished": "2026-09-15T15:23:40.292Z",
"dateReserved": "2026-09-11T13:54:43.619Z",
"dateUpdated": "2026-09-15T17:31:45.292Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87793 (GCVE-0-2026-87793)
Vulnerability from nvd – Published: 2026-09-15 15:21 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
Reflected XSS in WordPress theme design-scuole-wordpress-theme
Summary
The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file,
allowing an unauthenticated attacker to execute arbitrary JavaScript in
a victim's browser via a crafted URL containing a malicious archive parameter.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:16 UTC
CWE
- CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/italia/design-scuole-wordpress-theme | product |
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
1.0 , ≤ 2.18.2
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87793",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:16:46.753126Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.479Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.18.2",
"status": "affected",
"version": "1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.18.2",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lorenzo Zarfati"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"Design Scuole Italia\" WordPress theme is affected by a Reflected XSS vulnerability in the\u0026nbsp;\u003ccode\u003efilters-scheda-didattica.php\u003c/code\u003e\u0026nbsp;file,\n allowing an unauthenticated attacker to execute arbitrary JavaScript in\n a victim\u0027s browser via a crafted URL containing a malicious\u0026nbsp;\u003ccode\u003earchive\u003c/code\u003e\u0026nbsp;parameter."
}
],
"value": "The \"Design Scuole Italia\" WordPress theme is affected by a Reflected XSS vulnerability in the\u00a0filters-scheda-didattica.php\u00a0file,\n allowing an unauthenticated attacker to execute arbitrary JavaScript in\n a victim\u0027s browser via a crafted URL containing a malicious\u00a0archive\u00a0parameter."
}
],
"impacts": [
{
"capecId": "CAPEC-591",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-591 Reflected XSS"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:21:47.322Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
},
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cblockquote\u003e\u003cp\u003eTo fix the vulnerability, replace \u003ccode\u003e\u0026lt;?php echo $archive; ?\u0026gt;\u003c/code\u003e with \u003ccode\u003e\u0026lt;?php echo esc_attr($archive); ?\u0026gt;\u003c/code\u003e in both affected files.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\n\u003cbr\u003e"
}
],
"value": "To fix the vulnerability, replace \u003c?php echo $archive; ?\u003e with \u003c?php echo esc_attr($archive); ?\u003e in both affected files."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Reflected XSS in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-87793",
"datePublished": "2026-09-15T15:21:47.322Z",
"dateReserved": "2026-09-09T09:28:48.222Z",
"dateUpdated": "2026-09-15T17:31:45.479Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87792 (GCVE-0-2026-87792)
Vulnerability from nvd – Published: 2026-09-15 15:20 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme
Summary
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:17 UTC
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
| https://github.com/italia/design-scuole-wordpress-theme | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
1.0 , ≤ 2.17.3
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87792",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:17:00.469779Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.662Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.17.3",
"status": "affected",
"version": "1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.17.3",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Filippo Sorbellini"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"Design Scuole Italia\" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the\u0026nbsp;\u003ccode\u003edsi_pdf_generator\u003c/code\u003e\u0026nbsp;and\u0026nbsp;\u003ccode\u003edsi_csv_generator\u003c/code\u003e\u0026nbsp;functions, allowing an unauthenticated attacker to access restricted \"Circolare\" content and registered users\u0027 data. An unauthenticated RSS feed at\u0026nbsp;\u003ccode\u003e/circolare/feed/\u003c/code\u003e\u0026nbsp;further facilitates exploitation."
}
],
"value": "The \"Design Scuole Italia\" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the\u00a0dsi_pdf_generator\u00a0and\u00a0dsi_csv_generator\u00a0functions, allowing an unauthenticated attacker to access restricted \"Circolare\" content and registered users\u0027 data. An unauthenticated RSS feed at\u00a0/circolare/feed/\u00a0further facilitates exploitation."
}
],
"impacts": [
{
"capecId": "CAPEC-1",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:20:17.877Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
},
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-87792",
"datePublished": "2026-09-15T15:20:17.877Z",
"dateReserved": "2026-09-09T09:28:48.222Z",
"dateUpdated": "2026-09-15T17:31:45.662Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87791 (GCVE-0-2026-87791)
Vulnerability from nvd – Published: 2026-09-15 15:10 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme
Summary
A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:17 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/italia/design-scuole-wordpress-theme | product |
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
2.6.0 , ≤ 2.18.1
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87791",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:17:30.522591Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.818Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.18.1",
"status": "affected",
"version": "2.6.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.18.1",
"versionStartIncluding": "2.6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Filippo Sorbellini"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eA path traversal vulnerability exists in the \u003ccode\u003ereserved_file_check\u003c/code\u003e function of the\u0026nbsp;\u003ccode\u003efunctions.php\u003c/code\u003e\u0026nbsp;file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.\u003c/div\u003e"
}
],
"value": "A path traversal vulnerability exists in the reserved_file_check function of the\u00a0functions.php\u00a0file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process."
}
],
"impacts": [
{
"capecId": "CAPEC-126",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-126 Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:10:37.613Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
},
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to version 2.18.2"
}
],
"value": "Update to version 2.18.2"
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-05-30T07:03:00.000Z",
"value": "patched in v2.18.2"
}
],
"title": "Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-87791",
"datePublished": "2026-09-15T15:10:37.613Z",
"dateReserved": "2026-09-09T09:28:48.222Z",
"dateUpdated": "2026-09-15T17:31:45.818Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-89307 (GCVE-0-2026-89307)
Vulnerability from cvelistv5 – Published: 2026-09-15 15:23 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme
Summary
The "Firma Circolare" feature in the "Design Scuole Italia" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect).
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:16 UTC
CWE
- CWE-601 - URL redirection to untrusted site ('open redirect')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/italia/design-scuole-wordpress-theme | product |
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
1.0 , ≤ 2.17.3
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-89307",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:16:36.848070Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.292Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.17.3",
"status": "affected",
"version": "1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.17.3",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lorenzo Zarfati"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"Firma Circolare\" feature in the \"Design Scuole Italia\" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect)."
}
],
"value": "The \"Firma Circolare\" feature in the \"Design Scuole Italia\" WordPress theme allows an authenticated attacker to inject arbitrary HTML via the sign parameter, enabling forced redirection of visiting users to an attacker-controlled URL (Stored HTML Injection / Open Redirect)."
}
],
"impacts": [
{
"capecId": "CAPEC-98",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-98 Phishing"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "LOW",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "PASSIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "NONE",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-601",
"description": "CWE-601 URL redirection to untrusted site (\u0027open redirect\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:23:40.292Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
},
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "HTML injection allows open redirection in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-89307",
"datePublished": "2026-09-15T15:23:40.292Z",
"dateReserved": "2026-09-11T13:54:43.619Z",
"dateUpdated": "2026-09-15T17:31:45.292Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87793 (GCVE-0-2026-87793)
Vulnerability from cvelistv5 – Published: 2026-09-15 15:21 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
Reflected XSS in WordPress theme design-scuole-wordpress-theme
Summary
The "Design Scuole Italia" WordPress theme is affected by a Reflected XSS vulnerability in the filters-scheda-didattica.php file,
allowing an unauthenticated attacker to execute arbitrary JavaScript in
a victim's browser via a crafted URL containing a malicious archive parameter.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:16 UTC
CWE
- CWE-79 - Improper neutralization of input during web page generation ('cross-site scripting')
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/italia/design-scuole-wordpress-theme | product |
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
1.0 , ≤ 2.18.2
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87793",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:16:46.753126Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.479Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "affected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.18.2",
"status": "affected",
"version": "1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.18.2",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Lorenzo Zarfati"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"Design Scuole Italia\" WordPress theme is affected by a Reflected XSS vulnerability in the\u0026nbsp;\u003ccode\u003efilters-scheda-didattica.php\u003c/code\u003e\u0026nbsp;file,\n allowing an unauthenticated attacker to execute arbitrary JavaScript in\n a victim\u0027s browser via a crafted URL containing a malicious\u0026nbsp;\u003ccode\u003earchive\u003c/code\u003e\u0026nbsp;parameter."
}
],
"value": "The \"Design Scuole Italia\" WordPress theme is affected by a Reflected XSS vulnerability in the\u00a0filters-scheda-didattica.php\u00a0file,\n allowing an unauthenticated attacker to execute arbitrary JavaScript in\n a victim\u0027s browser via a crafted URL containing a malicious\u00a0archive\u00a0parameter."
}
],
"impacts": [
{
"capecId": "CAPEC-591",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-591 Reflected XSS"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 5.1,
"baseSeverity": "MEDIUM",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "ACTIVE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "LOW",
"vulnIntegrityImpact": "LOW",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-79",
"description": "CWE-79 Improper neutralization of input during web page generation (\u0027cross-site scripting\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:21:47.322Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
},
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cblockquote\u003e\u003cp\u003eTo fix the vulnerability, replace \u003ccode\u003e\u0026lt;?php echo $archive; ?\u0026gt;\u003c/code\u003e with \u003ccode\u003e\u0026lt;?php echo esc_attr($archive); ?\u0026gt;\u003c/code\u003e in both affected files.\u003c/p\u003e\n\u003c/blockquote\u003e\n\n\n\u003cbr\u003e"
}
],
"value": "To fix the vulnerability, replace \u003c?php echo $archive; ?\u003e with \u003c?php echo esc_attr($archive); ?\u003e in both affected files."
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Reflected XSS in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-87793",
"datePublished": "2026-09-15T15:21:47.322Z",
"dateReserved": "2026-09-09T09:28:48.222Z",
"dateUpdated": "2026-09-15T17:31:45.479Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87792 (GCVE-0-2026-87792)
Vulnerability from cvelistv5 – Published: 2026-09-15 15:20 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme
Summary
The "Design Scuole Italia" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the dsi_pdf_generator and dsi_csv_generator functions, allowing an unauthenticated attacker to access restricted "Circolare" content and registered users' data. An unauthenticated RSS feed at /circolare/feed/ further facilitates exploitation.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:17 UTC
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
| https://github.com/italia/design-scuole-wordpress-theme | product |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
1.0 , ≤ 2.17.3
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87792",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:17:00.469779Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.662Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.17.3",
"status": "affected",
"version": "1.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.17.3",
"versionStartIncluding": "1.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Filippo Sorbellini"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "The \"Design Scuole Italia\" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the\u0026nbsp;\u003ccode\u003edsi_pdf_generator\u003c/code\u003e\u0026nbsp;and\u0026nbsp;\u003ccode\u003edsi_csv_generator\u003c/code\u003e\u0026nbsp;functions, allowing an unauthenticated attacker to access restricted \"Circolare\" content and registered users\u0027 data. An unauthenticated RSS feed at\u0026nbsp;\u003ccode\u003e/circolare/feed/\u003c/code\u003e\u0026nbsp;further facilitates exploitation."
}
],
"value": "The \"Design Scuole Italia\" WordPress theme is affected by multiple Authorization Bypass vulnerabilities in the\u00a0dsi_pdf_generator\u00a0and\u00a0dsi_csv_generator\u00a0functions, allowing an unauthenticated attacker to access restricted \"Circolare\" content and registered users\u0027 data. An unauthenticated RSS feed at\u00a0/circolare/feed/\u00a0further facilitates exploitation."
}
],
"impacts": [
{
"capecId": "CAPEC-1",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-1 Accessing Functionality Not Properly Constrained by ACLs"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862",
"lang": "en",
"type": "CWE"
}
]
},
{
"descriptions": [
{
"cweId": "CWE-200",
"description": "CWE-200",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:20:17.877Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
},
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
}
],
"source": {
"discovery": "UNKNOWN"
},
"title": "Multiple authorization bypass in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-87792",
"datePublished": "2026-09-15T15:20:17.877Z",
"dateReserved": "2026-09-09T09:28:48.222Z",
"dateUpdated": "2026-09-15T17:31:45.662Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-87791 (GCVE-0-2026-87791)
Vulnerability from cvelistv5 – Published: 2026-09-15 15:10 – Updated: 2026-09-15 17:31
VLAI
EPSS
VEX
Title
Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme
Summary
A path traversal vulnerability exists in the reserved_file_check function of the functions.php file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.
Severity
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-09-15 17:17 UTC
CWE
Assigner
References
2 references
| URL | Tags |
|---|---|
| https://github.com/italia/design-scuole-wordpress-theme | product |
| https://www.acn.gov.it/portale/w/rilevate-vulnera… | government-resource |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| Developers Italia | design-scuole-wordpress-theme |
Affected:
2.6.0 , ≤ 2.18.1
(semver)
cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:* |
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-87791",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-09-15T17:17:30.522591Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T17:31:45.818Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"defaultStatus": "unaffected",
"product": "design-scuole-wordpress-theme",
"repo": "https://github.com/italia/design-scuole-wordpress-theme",
"vendor": "Developers Italia",
"versions": [
{
"lessThanOrEqual": "2.18.1",
"status": "affected",
"version": "2.6.0",
"versionType": "semver"
}
]
}
],
"cpeApplicability": [
{
"nodes": [
{
"cpeMatch": [
{
"criteria": "cpe:2.3:a:developers_italia:design-scuole-wordpress-theme:*:*:*:*:*:*:*:*",
"versionEndIncluding": "2.18.1",
"versionStartIncluding": "2.6.0",
"vulnerable": true
}
],
"negate": false,
"operator": "OR"
}
],
"operator": "OR"
}
],
"credits": [
{
"lang": "en",
"type": "finder",
"value": "Filippo Sorbellini"
},
{
"lang": "en",
"type": "coordinator",
"value": "CSIRT-IT"
}
],
"descriptions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "\u003cdiv\u003eA path traversal vulnerability exists in the \u003ccode\u003ereserved_file_check\u003c/code\u003e function of the\u0026nbsp;\u003ccode\u003efunctions.php\u003c/code\u003e\u0026nbsp;file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process.\u003c/div\u003e"
}
],
"value": "A path traversal vulnerability exists in the reserved_file_check function of the\u00a0functions.php\u00a0file in the WordPress Design Scuole Italia theme. The vulnerability allows an unauthenticated attacker to download arbitrary files accessible by the web server process."
}
],
"impacts": [
{
"capecId": "CAPEC-126",
"descriptions": [
{
"lang": "en",
"value": "CAPEC-126 Path Traversal"
}
]
}
],
"metrics": [
{
"cvssV4_0": {
"Automatable": "NOT_DEFINED",
"Recovery": "NOT_DEFINED",
"Safety": "NOT_DEFINED",
"attackComplexity": "LOW",
"attackRequirements": "NONE",
"attackVector": "NETWORK",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"exploitMaturity": "NOT_DEFINED",
"privilegesRequired": "NONE",
"providerUrgency": "NOT_DEFINED",
"subAvailabilityImpact": "NONE",
"subConfidentialityImpact": "NONE",
"subIntegrityImpact": "NONE",
"userInteraction": "NONE",
"valueDensity": "NOT_DEFINED",
"vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N",
"version": "4.0",
"vulnAvailabilityImpact": "NONE",
"vulnConfidentialityImpact": "HIGH",
"vulnIntegrityImpact": "NONE",
"vulnerabilityResponseEffort": "NOT_DEFINED"
},
"format": "CVSS",
"scenarios": [
{
"lang": "en",
"value": "GENERAL"
}
]
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-22",
"description": "CWE-22",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-15T15:10:37.613Z",
"orgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"shortName": "ENISA"
},
"references": [
{
"tags": [
"product"
],
"url": "https://github.com/italia/design-scuole-wordpress-theme"
},
{
"tags": [
"government-resource"
],
"url": "https://www.acn.gov.it/portale/w/rilevate-vulnerabilita-nel-tema-wordpress-design-scuole-italia-"
}
],
"solutions": [
{
"lang": "en",
"supportingMedia": [
{
"base64": false,
"type": "text/html",
"value": "Update to version 2.18.2"
}
],
"value": "Update to version 2.18.2"
}
],
"source": {
"discovery": "UNKNOWN"
},
"timeline": [
{
"lang": "en",
"time": "2026-05-30T07:03:00.000Z",
"value": "patched in v2.18.2"
}
],
"title": "Path traversal vulnerability in WordPress theme design-scuole-wordpress-theme",
"x_generator": {
"engine": "Vulnogram 1.0.4"
}
}
},
"cveMetadata": {
"assignerOrgId": "a6d3dc9e-0591-4a13-bce7-0f5b31ff6158",
"assignerShortName": "ENISA",
"cveId": "CVE-2026-87791",
"datePublished": "2026-09-15T15:10:37.613Z",
"dateReserved": "2026-09-09T09:28:48.222Z",
"dateUpdated": "2026-09-15T17:31:45.818Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}