The DesignThemes Directory Addon by designthemes suffers from a Missing Authorization vulnerability affecting versions up to 1.8. This vulnerability arises from improperly configured access control mechanisms, allowing attackers to bypass authorization checks. The CVSS 3.1 base score is 7.5, reflecting that the vulnerability is remotely exploitable without authentication or user interaction and results in a high confidentiality impact but no integrity or availability impact. No patch or official remediation guidance is currently provided, and the product is not a cloud service, so remediation depends on vendor updates or user action.

Exploitation of this vulnerability can lead to unauthorized disclosure of sensitive information due to missing authorization controls. The high CVSS score indicates a significant confidentiality impact. There is no indication of integrity or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is available, users should monitor for vendor updates and consider restricting access to the affected addon until a fix is released.