The vulnerability CVE-2026-32382 affects raratheme Digital Download versions up to 1.1.4 and is characterized by missing authorization checks. This improper access control allows attackers without privileges to perform unauthorized actions that could modify data. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity loss without affecting confidentiality or availability. No patch or remediation information is currently available.

Exploitation of this vulnerability could allow an unauthenticated attacker to perform unauthorized modifications within the affected application, potentially compromising data integrity. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations in the affected Digital Download plugin to prevent unauthorized access. Monitor for vendor updates or security advisories regarding this vulnerability.