This vulnerability, identified as CVE-2026-57355, is a broken access control issue (CWE-862) in RadiusTheme's Classified Listing product versions up to 5.4.2. It allows subscribers with limited privileges to bypass authorization controls, potentially leading to unauthorized modification of data or actions that compromise data integrity. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity, requiring privileges, no user interaction, and resulting in integrity impact only. No known exploits are reported in the wild, and no official remediation or patch has been announced as of the publication date.

The vulnerability allows unauthorized actions by subscribers due to missing authorization checks, impacting data integrity. There is no confidentiality or availability impact reported. The attack requires network access and some privileges but no user interaction. This could lead to unauthorized modification of classified listing data or related integrity breaches.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is provided, monitor vendor communications for updates. Until a patch is available, restrict subscriber privileges where possible to limit potential exploitation.