The Responsive theme for WordPress by Cyberchimps contains a missing authorization vulnerability (CWE-862) in the save_footer_text_callback function. This flaw allows unauthenticated attackers to modify footer content by injecting arbitrary HTML, due to the absence of a capability check. The vulnerability affects all versions up to 5.0.2. The CVSS v3.1 base score is 7.5, reflecting a high severity with network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, high integrity impact, and no availability impact. No patch or official remediation has been documented yet.

An attacker can inject arbitrary HTML into the footer of a WordPress site using the Responsive theme without authentication. This compromises the integrity of the site content and could be leveraged for defacement or to insert malicious scripts, although confidentiality and availability are not impacted according to the CVSS vector. The vulnerability affects all site visitors and administrators by altering displayed content without permission.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, site administrators should consider disabling or replacing the Responsive theme to prevent exploitation. Monitoring for updates from Cyberchimps or WordPress security advisories is recommended.