The vulnerability identified as CVE-2025-46258 in BdThemes Element Pack Pro is classified under CWE-862 (Missing Authorization). It arises from improperly configured access control mechanisms that fail to enforce authorization checks correctly. This can allow an attacker with limited privileges to perform actions or access data beyond their intended permissions. The CVSS v3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and limited confidentiality and integrity impact. The vulnerability affects versions before 8.0.0, but no specific patch or remediation details have been provided by the vendor.

Successful exploitation of this vulnerability could allow an attacker with some level of privileges to bypass authorization controls, leading to limited confidentiality and integrity impacts. There is no indication of availability impact. No known exploits have been reported in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor BdThemes communications for updates. Until a fix is released, review and tighten access control configurations where possible to minimize exposure.