This vulnerability in MainWP Child (<=6.1.1) is due to missing authorization controls, allowing unauthenticated users to bypass access restrictions. It is categorized as CWE-862 (Missing Authorization). The CVSS 3.1 vector indicates network attack vector, high attack complexity, no privileges required, user interaction required, unchanged scope, and high impact on confidentiality, integrity, and availability. No vendor advisory or patch information is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

Successful exploitation could allow unauthenticated attackers to bypass access controls, potentially leading to full compromise of confidentiality, integrity, and availability of the affected system. This could result in unauthorized data access, modification, or disruption of service within MainWP Child installations up to version 6.1.1.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to vulnerable MainWP Child installations and monitor for suspicious activity. Avoid exposing the vulnerable service to untrusted networks where possible.