search
Zella Theme
Trends
- 1Zella Theme WordPress vulnerability allows unauthenticated font uploadโ๐จ EUVD-2026-89637 ๐ Score: n/a ๐ฆ Product: Zella Theme ๐ข Vendor: Unknown ๐ Updated: 2026-09-30 ๐ The Zella Theme WordPres
A newly logged vulnerability, EUVD-2026-89637, affects the Zella Theme for WordPress in versions before 2.6.3. The theme fails to perform capability or nonce checks on one of its font upload actions, which is available to unauthenticated users, potentially allowing attackers to upload files without an account. Site administrators running the theme are advised to update to version 2.6.3 or later.