CVE-2026-75027 is an authorization bypass vulnerability in the Themify Builder WordPress plugin (up to and including version 7.8.0). The plugin fails to properly verify user authorization before allowing modifications to stored styling data (padding and margin properties) of posts. An attacker can supply a controlled post ID and JSON styling payload to modify arbitrary posts, including private and draft ones. The nonce intended to protect this action is automatically emitted to all frontend pages via wp_localize_script, allowing any unauthenticated visitor to retrieve a valid nonce from the page source and bypass the only access control mechanism.

An unauthenticated attacker can modify the styling data of arbitrary posts, including private and draft posts, without proper authorization. This could lead to unauthorized content manipulation but does not impact confidentiality or availability directly. The CVSS score is 5.3 (medium severity), reflecting the limited scope of impact (integrity only).

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the frontend pages or disable the Themify Builder plugin if possible to reduce exposure. Monitor vendor channels for updates and apply patches promptly once released.