This vulnerability in the eDS Responsive Menu plugin from aThemeArt Translations is due to missing authorization checks, which could allow an attacker with limited privileges to access functionality or data that should be restricted. The affected versions include all versions up to and including 1.2. The CVSS 3.1 vector indicates the attack can be performed remotely over the network with low complexity and requires low privileges but no user interaction. The impact is limited to partial confidentiality loss without affecting integrity or availability.

The vulnerability allows unauthorized access to certain features or data within the eDS Responsive Menu plugin, potentially exposing sensitive information. However, it does not allow modification or disruption of service. The medium severity rating reflects this limited confidentiality impact. There are no reports of exploitation in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix is currently documented, users should monitor for updates from aThemeArt Translations. Until a fix is available, restrict access to the plugin's administrative interfaces to trusted users only to minimize risk.