The Mizan Demo Importer plugin for Mizan Themes contains a missing authorization vulnerability affecting versions up to 0.1.3. This issue arises from incorrectly configured access control security levels, enabling users with limited privileges to perform unauthorized actions. The vulnerability does not impact confidentiality but can affect data integrity and availability. The CVSS 3.1 vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, and unchanged scope.

Exploitation of this vulnerability can lead to unauthorized modification or disruption of the plugin's functionality, impacting data integrity and availability. Confidentiality is not affected. The vulnerability requires an attacker to have some level of privileges on the system but no user interaction is needed. No known active exploits have been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Mizan Demo Importer plugin to trusted users only and monitor for suspicious activity related to plugin usage.