This vulnerability in UX-themes Flatsome is due to missing authorization checks, resulting in incorrect access control configurations. It affects all versions up to and including 3.20.5. The vulnerability can be exploited remotely without privileges or user interaction, leading to a high confidentiality impact. The CVSS vector indicates network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No remediation level or patch information is currently provided by the vendor or authoritative sources.

Successful exploitation could allow an attacker to access sensitive information without authorization, compromising confidentiality. There is no impact on integrity or availability according to the CVSS vector. No known exploits are currently reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor vendor communications for updates. No specific mitigation steps are currently documented.