This vulnerability in ACME Divi Modules (<= 1.3.5) arises from missing authorization checks, which results in incorrect access control configurations. An attacker with low privileges could exploit this issue remotely to gain limited unauthorized access to information. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction needed, and only a confidentiality impact. No integrity or availability impacts are noted.

The impact is limited to partial confidentiality loss without affecting integrity or availability. An attacker with some privileges could access information they should not be authorized to view. There is no evidence of exploitation in the wild or more severe impacts such as code execution or denial of service.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently referenced, users should monitor vendor communications for updates. Until a fix is available, restrict access to the affected modules to trusted users only and review access control configurations carefully.