The ColorMag WordPress theme suffers from a missing capability check in the welcome_notice_import_handler() function, which allows authenticated users with low privileges (Subscriber-level and above) to install the ThemeGrill Demo Importer plugin. This vulnerability is classified under CWE-862 (Missing Authorization) and affects all versions up to and including 4.0.19. The CVSS 3.1 base score is 4.3, indicating medium severity, with an attack vector over the network, low attack complexity, and no user interaction required. The impact is limited to unauthorized modification (integrity) without confidentiality or availability impact.

An attacker with at least Subscriber-level access can exploit this vulnerability to install the ThemeGrill Demo Importer plugin on the affected WordPress site. This unauthorized modification could lead to further changes or configurations not intended by the site administrator. There is no direct impact on confidentiality or availability reported. No known exploits are currently observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently available, site administrators should consider restricting Subscriber-level access where possible and monitor for suspicious plugin installations. Applying principle of least privilege to user roles may reduce risk until a fix is released.