PT-2026-25229 · Rara Theme · Digital Download

Trương Hữu Phúc + 1 · Published 2026-03-13 · Updated 2026-03-14 · CVE-2026-32382

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions raratheme Digital Download versions n/a through 1.1.4

Description A missing authorization issue exists in raratheme Digital Download’s digital-download functionality. This allows exploitation of incorrectly configured access control security levels. The issue concerns the control of access to resources within the application.

Recommendations Versions prior to 1.1.4 should be updated.

Fix

Missing Authorization

Weakness Enumeration

CWE-862

Related Identifiers

CVE-2026-32382

Affected Products

Digital Download

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2026-32382 · Security Note
• https://patchstack.com/database/Wordpress/Theme/digital-download/vulnerability/wordpress-digital-download-theme-1-1-4-broken-access-control-vulnerability?_s_id=cve · Note
• https://twitter.com/CVEnew/status/2032831468272300216 · Twitter Post
• https://twitter.com/infoflowcloud/status/2032833314726215913 · Twitter Post