CVE-2022-45352 MEDIUM

CVE-2022-45352: WordPress Betheme premium theme <= 26.6.1 - Broken Access Control vulnerability

Vendor Muffingroup
Product Betheme
Weakness CWE-862 · Missing authorization
Published March 25, 2024
Last update April 28, 2026
View on NVD All CVEs

CVSS base score

5.4/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality None
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

What the vulnerability does

01Description

Missing Authorization vulnerability in Muffingroup Betheme.This issue affects Betheme: from n/a through 26.6.1.

Key dates

02Disclosure timeline

March 25, 2024 CVE published
April 28, 2026 Record updated

Related vulnerabilities

04Related CVE

CVE-2025-69315 WordPress Simply Schedule Appointments plugin <= 1.6.9.15 - Broken Access Control vulnerability CVE-2026-8382 Advanced Custom Fields (ACF®) <= 6.8.1 - Unauthenticated Arbitrary Post Modification via Front-End Form '_post_title' and '_post_content' Parameters CVE-2025-23957 WordPress Sur.ly plugin <= 3.0.3 - Broken Access Control vulnerability CVE-2022-2450 reSmush.it Image Optimizer < 0.4.4 - Subscriber+ AJAX Calls CVE-2024-7858 Media Library Folders <= 8.2.3 - Missing Authorization on Various Functions