This vulnerability in the PawFriends WordPress theme arises from improper access control configuration, enabling an attacker to bypass authorization by manipulating a user-controlled key. The issue affects versions up to and including 1.3. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, but high impact on availability. There is no vendor advisory or patch information provided, and no known exploits have been observed.

The vulnerability allows an attacker to bypass authorization controls, potentially disrupting the availability of the affected system. There is no impact on confidentiality or integrity according to the CVSS vector. The high severity rating is driven by the potential for denial of service or availability disruption. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users of the PawFriends theme should monitor for updates from Mikado-Themes. Until a fix is available, consider restricting access to the affected theme or disabling it if feasible to reduce exposure.