This vulnerability in Mikado-Themes Fleur (<= 2.0) involves an authorization bypass through a user-controlled key due to misconfigured access control security levels. An attacker with some privileges (low privileges required) can exploit this flaw remotely without user interaction to cause limited integrity and availability impact. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact.

The vulnerability allows an attacker with low privileges to bypass authorization controls, potentially leading to unauthorized actions that affect the integrity and availability of the affected system. There is no confidentiality impact reported. No known exploits are currently in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Users should monitor vendor communications for updates and apply patches once released.