This vulnerability, identified as CWE-266 (Incorrect Privilege Assignment), affects MVPThemes Jawn software versions up to 1.4.2. It allows unauthenticated attackers to escalate their privileges, potentially gaining unauthorized access or control. The CVSS 3.1 vector indicates the attack can be performed remotely without authentication, with low attack complexity and no user interaction required. The impact includes complete compromise of confidentiality, integrity, and availability of the affected system. No vendor advisory or patch information is currently provided, and no known active exploitation has been reported.

Successful exploitation results in full privilege escalation by unauthenticated attackers, leading to complete compromise of the system's confidentiality, integrity, and availability. This could allow attackers to execute arbitrary actions with elevated privileges.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected software and monitor for unusual activity related to privilege escalation attempts.