This vulnerability in Tomdever wpForo Forum (<= 2.4.6) involves an authorization bypass through a user-controlled key due to misconfigured access control security levels. It allows an attacker with at least low privileges to bypass certain authorization checks, potentially impacting the availability of the forum. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, and no impact on confidentiality or integrity, only availability.

The vulnerability could allow an attacker with low privileges to bypass authorization controls, potentially leading to limited availability disruption of the wpForo Forum. There is no impact on confidentiality or integrity according to the CVSS vector. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor for vendor updates and apply any official patches once available. Until then, review and tighten access control configurations if possible to mitigate risk.