This vulnerability in Jthemes Exzo (<= 1.2.4) arises from incorrectly configured access control, resulting in missing authorization checks. An unauthenticated attacker can exploit this over the network to gain unauthorized access to sensitive information, impacting confidentiality. The CVSS score of 7.5 reflects a high-severity issue with low attack complexity and no required privileges or user interaction. No patch or official remediation guidance is currently available, and no exploits have been observed in the wild.

Successful exploitation allows an unauthenticated attacker to access sensitive data without authorization, compromising confidentiality. There is no impact on integrity or availability according to the CVSS vector. This could lead to information disclosure risks depending on the data accessible via the flawed access control.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the affected application where possible and monitor for unusual access patterns. Avoid exposing the vulnerable version of Exzo to untrusted networks.