This vulnerability (CVE-2024-37496) in the Rara Themes Metro Magazine WordPress theme is classified as CWE-862 (Missing Authorization). It arises from improper access control configurations that could allow unauthorized users to perform actions they should not be permitted to. The issue affects versions up to 1.3.7, but no specific fixed version or patch has been disclosed. The CVSS 3.1 base score of 4.3 reflects a network attack vector with low complexity, no privileges required, and requiring user interaction, resulting in low impact on integrity and no impact on confidentiality or availability.

The vulnerability could allow an attacker to bypass access controls and perform limited unauthorized actions that impact the integrity of the affected system. There is no impact on confidentiality or availability reported. The medium severity score reflects the potential for limited unauthorized modification without elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is currently available, users should monitor vendor communications for updates. Until a patch is released, consider restricting access to the affected theme's administrative functions and limit user roles to trusted individuals to reduce risk.