This vulnerability in favethemes Houzez (<= 4.0.4) is due to missing authorization checks, which results in incorrect access control configurations. An attacker with low privileges can exploit this issue over the network without user interaction to cause integrity impacts. The CVSS 3.1 base score is 4.3, reflecting a medium severity level with network attack vector, low attack complexity, and no user interaction required. No vendor advisory or patch information is available, and the product is not a cloud service.

The vulnerability allows an attacker with some privileges to bypass authorization controls, potentially leading to unauthorized modification or manipulation of data (integrity impact). There is no impact on confidentiality or availability according to the CVSS vector. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and strengthen access control configurations in the affected Houzez installations to limit potential exploitation.