CVE-2026-39624
MediumCVSS 5.3Exploitation Probability (EPSS)
Low risk9th percentile - higher than 9% of all known CVEs
Summary
The Biolife WordPress theme has a missing authorization vulnerability, allowing exploitation of incorrectly configured access control security levels. This issue affects versions up to and including 3.2.3.
Risk Assessment
An unauthorized user can change theme settings or access administrative functions, potentially leading to site integrity compromise.
Recommendation
Update the Biolife theme to the latest version and verify permission configuration.
Other vulnerabilities in Biolife
See all- CVE-2026-62096High
The Biolife theme in versions up to and including 3.2.3 is vulnerable to unauthenticated Local File Inclusion. An attacker can load files from the server.
- CVE-2026-62095High
The Biolife theme in versions up to and including 3.2.3 contains an unauthenticated Cross Site Scripting (XSS) flaw. It allows injection of malicious script into site pages.
- CVE-2026-39623High
The Biolife WordPress theme contains a PHP Local File Inclusion (LFI) vulnerability due to improper filename control in include/require statements. Attackers can read arbitrary files on the server.
Original NVD description (English source)
Missing Authorization vulnerability in kutethemes Biolife biolife allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Biolife: from n/a through <= 3.2.3.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS