This vulnerability in themeplugs Authorsy (versions up to 1.0.6) involves an authorization bypass caused by a user-controlled key that exploits improperly configured access control mechanisms. The flaw allows an attacker to gain unauthorized access remotely without authentication or user interaction, impacting the confidentiality of the system. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, and high confidentiality impact with no impact on integrity or availability.

Successful exploitation can lead to unauthorized disclosure of sensitive information due to bypassed access controls. There is no reported impact on data integrity or availability. The vulnerability affects confidentiality, potentially exposing protected data to attackers without requiring authentication.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should monitor vendor communications for updates. No specific temporary mitigations are provided in the available data.