CVE-2026-32379 describes a missing authorization vulnerability in the Rara Academic WordPress theme (versions up to 1.2.2). The flaw arises from improperly configured access control mechanisms, which could allow unauthorized users to perform actions that should be restricted. The CVSS score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but a low integrity impact. No official patch or vendor advisory is currently available, and the product is not a cloud service.

The vulnerability allows unauthorized modification or manipulation of data or functionality within the affected theme due to missing authorization checks. There is no impact on confidentiality or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or fix is currently documented, users should monitor vendor communications for updates. Until a fix is available, consider restricting access to administrative interfaces and reviewing theme usage to minimize exposure.