A missing authorization vulnerability exists in HTMega HT Mega ht-mega-for-elementor versions up to 3.2.8. This flaw allows attackers to exploit incorrectly configured access control security levels, potentially leading to unauthorized access to certain functionalities or data. The vulnerability has a CVSS v3.1 base score of 5.3, indicating a medium severity level with network attack vector, low attack complexity, no privileges required, and no user interaction needed. Confidentiality impact is low, with no integrity or availability impact reported.