This vulnerability (CVE-2025-31071) in the themeton HotStar – Multi-Purpose Business Theme is classified as CWE-862 (Missing Authorization). It arises from improperly configured access control mechanisms that fail to enforce authorization checks, enabling unauthorized users to perform actions they should not be permitted to. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but with integrity impact. The affected product versions include all versions up to 1.4. No official patch or remediation guidance is currently provided by the vendor.

The vulnerability allows unauthorized users to perform actions that should require authorization, impacting the integrity of the system using the HotStar theme. There is no impact on confidentiality or availability reported. No known exploits are currently active in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should review and tighten access control configurations where possible to mitigate unauthorized access risks. Monitor vendor channels for updates and apply patches promptly once available.