The vulnerability identified as CVE-2026-24615 affects the Cream Magazine plugin by themebeez, specifically versions up to 2.1.10. It involves missing authorization controls, meaning that certain actions or resources may be accessible without proper permission checks. This misconfiguration can lead to unauthorized modification or manipulation of data, impacting the integrity of the affected system. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, but it does not affect confidentiality or availability.

The impact of this vulnerability is limited to integrity, as unauthorized users may be able to perform actions or changes they should not be permitted to do. Confidentiality and availability are not affected according to the CVSS vector. No known exploits are reported in the wild, reducing immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor themebeez advisories for updates. Until a fix is available, restricting access to the affected plugin and minimizing exposure may reduce risk.