This vulnerability (CVE-2025-7013) in QR Menu Pro Smart Menu Systems Menu Panel is classified as CWE-639 (Authorization Bypass Through User-Controlled Key). It allows an attacker with limited privileges and requiring user interaction to bypass authorization controls by manipulating trusted identifiers. The issue affects Menu Panel versions through 29012026. The vulnerability has a CVSS v3.1 base score of 5.7, reflecting network attack vector, low attack complexity, requiring privileges and user interaction, with high confidentiality impact but no integrity or availability impact. The vendor has not provided a response or patch, and no official remediation guidance is available.

Successful exploitation could allow an attacker to bypass authorization mechanisms and gain unauthorized access to sensitive information, impacting confidentiality. There is no impact on integrity or availability reported. The vulnerability requires the attacker to have some privileges and user interaction, which limits the ease of exploitation. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since the vendor has not responded and no patches are available, users should monitor for updates from the vendor. Until a fix is released, restrict access to the affected Menu Panel system to trusted users only and consider additional access controls to limit potential exploitation.