This vulnerability in G5Theme Zorka (versions up to 1.5.7) involves missing authorization controls, which means that certain actions or resources may be accessible without proper permission checks. The issue arises from incorrectly configured access control security levels, allowing unauthorized users to perform actions that should be restricted. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact indicated. No vendor advisory or patch information is provided, and the product is not a cloud service.

The vulnerability allows unauthorized users to perform actions that can alter data or system state (integrity impact) without requiring privileges or user interaction. There is no impact on confidentiality or availability. Exploitation could lead to unauthorized modifications within the affected system.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or workaround is currently documented, users should monitor vendor communications for updates. Until a fix is available, review and tighten access control configurations where possible to limit exposure.