Blogpoet (< 1.0.4)

A missing authorization vulnerability in the Websiteinwp Blogpoet WordPress theme (versions < 1.0.4) allows unauthenticated users to access restricted functionality, including unauthorized plugin installation and activation.