The vulnerability identified as CVE-2026-32377 affects the raratheme Pranayama Yoga plugin through version 1.2.2. It is caused by missing authorization checks, which result in incorrectly configured access control security levels. This allows an attacker without privileges to perform actions that should be restricted, leading to integrity impact but no confidentiality or availability impact. The CVSS 3.1 vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, and unchanged scope.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized actions that modify data within the affected plugin. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. No official fix or patch links are currently available. Until a patch is released, users should monitor vendor communications for updates and consider restricting access to the affected plugin where possible.