CVE-2026-39716

CVE-2026-39716 is a missing authorization vulnerability affecting CKThemes Flipmart versions 2.8 and earlier, stemming from incorrectly configured access control security levels that allow unauthorized access to sensitive functions. The vulnerability has a CVSS score of 5.3 (medium severity) with a network-based attack vector requiring no authentication or user interaction, making it relatively easy to exploit. The primary impact is limited to confidentiality, as the vulnerability enables low-level information disclosure without affecting system integrity or availability. There is currently no evidence of active exploitation in the wild, with an EPSS score of 0.000370 indicating minimal real-world exploitation probability at this time. The vulnerability has not been added to the CISA Known Exploited Vulnerabilities catalog and remains inactive on security hotlists, suggesting community attention has been minimal thus far.