This vulnerability (CVE-2026-65548) affects Muffingroup Betheme, a WordPress theme, in versions up to 28.4.2. It is classified as CWE-94, improper control of generation of code, which can lead to remote code execution by a contributor-level user. The CVSS v3.1 score of 9.9 reflects network attack vector, low attack complexity, required privileges at contributor level, no user interaction, and complete impact on confidentiality, integrity, and availability. The vulnerability is published and known but lacks an official remediation or patch as of the current data. The affected versions are not explicitly listed but the description states "<= 28.4.2".

Successful exploitation allows an attacker with contributor privileges to execute arbitrary code remotely, potentially leading to full system compromise including data theft, modification, or denial of service. The vulnerability impacts confidentiality, integrity, and availability at a critical level. No known active exploitation has been reported yet.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict contributor-level access to trusted users only and monitor for suspicious activity related to Betheme. Avoid installing or updating to vulnerable versions if possible.