This vulnerability in favethemes Houzez involves missing authorization checks, allowing users with limited privileges to access functionality that should be restricted by Access Control Lists (ACLs). The issue affects all versions up to 4.1.1. The CVSS vector indicates the attack can be performed remotely over the network with low complexity and minimal privileges, without user interaction. The impact is primarily on confidentiality, with no integrity impact and low availability impact. No known exploits are reported in the wild as of the publication date.

Successful exploitation could allow an attacker with low privileges to access sensitive functionality or data that should be protected by authorization controls, potentially leading to unauthorized disclosure of confidential information. The vulnerability does not affect data integrity but may cause limited availability impact. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are provided at this time. Until a patch is available, restrict access to the affected Houzez versions and monitor for unusual access patterns related to authorization bypass. Follow vendor updates closely for any forthcoming security patches.