This vulnerability (CWE-862) in ThimPress Thim Core involves missing authorization checks, allowing users with limited privileges to execute actions they should not be authorized to perform. It affects versions up to 2.3.3. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity and no user interaction required. The impact is limited to integrity, with no confidentiality or availability impact reported. No patch or official remediation level has been published, and no known exploits have been observed.

An attacker with low privileges can exploit this missing authorization vulnerability to perform unauthorized actions that compromise the integrity of the affected system. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users and monitor for suspicious activity related to privilege misuse. Avoid granting unnecessary privileges to users in the affected versions.