Threats tagged 'ghsa-q7qf-q8mm-9qhq'

The Flatsome WordPress theme versions prior to 3.20.13 contain a vulnerability where the theme does not enforce user role restrictions on an AJAX save action. This flaw allows users with the Contributor role to publish their own content and change its post type, such as converting a post into a product, without having the necessary permissions.