The vulnerability identified as CVE-2026-39543 affects the Themefic Tourfic plugin through missing authorization controls. This means that certain actions or resources within the plugin may be accessible without proper permission checks, due to misconfigured access control settings. The affected versions include all versions up to 2.21.4. There is no available CVSS score or detailed technical data describing the exact nature of the access control failure or its impact scope. No vendor advisory or patch information is currently available.

The impact of this vulnerability is that unauthorized users may be able to perform actions or access resources that should be restricted, potentially leading to unauthorized data access or modification within the Tourfic plugin environment. However, without detailed exploit information or confirmed active exploitation, the precise impact remains unclear.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Themefic and apply patches promptly once available. Review and tighten access control configurations where possible to reduce exposure.