The CVE identifies a missing authorization flaw in the Themeansar Newses WordPress theme up to version 2.0.0.77 that allows attackers to bypass configured access control checks. This flaw enables unauthorized users to view or modify content that should be protected, or perform privileged operations without proper authentication. The weakness is classified as CWE-862: Missing Authorization.

The vulnerable component is the Themeansar Newses WordPress theme for all releases up to and including version 2.0.0.77. Users running any earlier or noted version of this theme are potentially affected.

The CVSS score of 5.4 indicates a medium severity impact. EPSS data is not available, so the exact likelihood of exploitation cannot be quantified. The vulnerability is not listed in the CISA KEV catalog. Based on the description, it is inferred that an attacker with the ability to send crafted requests to the WordPress site—either authenticated or unauthenticated—could exploit the flaw via the theme’s administrative interface or front‑end pages. No additional prerequisites beyond standard WordPress access appear to be required, making the attack vector likely through the application layer.