This vulnerability (CVE-2026-65487) in ThemeGoods Photography (<= 7.7.6) is classified as CWE-862: Missing Authorization. It allows unauthenticated attackers to bypass access controls, potentially modifying data or performing unauthorized actions. The CVSS 3.1 base score is 5.3 (medium), reflecting an attack vector over the network with low complexity, no privileges required, no user interaction, and an impact limited to integrity loss. No known exploits are reported in the wild, and no official remediation or patch is documented at this time.

The vulnerability enables unauthenticated attackers to bypass authorization controls, potentially leading to unauthorized modification of data (integrity impact). There is no impact on confidentiality or availability according to the CVSS vector. This could affect the trustworthiness of the data managed by the Photography product but does not directly expose sensitive information or cause service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor-provided mitigation or temporary fix is currently documented.