This vulnerability in Mikado-Themes Powerlift (versions before 3.2.1) is due to missing authorization checks, which results in incorrect access control enforcement. An attacker with low privileges can exploit this to perform unauthorized actions that affect data integrity. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact. No patch or vendor advisory is currently available to confirm remediation status.

The vulnerability allows an attacker with some privileges to bypass authorization controls, potentially modifying data or performing unauthorized operations within the affected Powerlift application. There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in Powerlift to minimize exposure. Monitor for vendor updates regarding patches or official mitigations.