The vulnerability exists because the Influencer WordPress theme incorrectly configures access control security levels, allowing users who normally lack certain privileges to perform unauthorized actions. This flaw, identified as CWE-862, can lead to malicious content manipulation and configuration changes on the affected WordPress site.

The raratheme Influencer WordPress theme is vulnerable in all releases from its earliest version through version 1.1.7 inclusive. Any installation of the theme with a version number less than or equal to 1.1.7 is within scope.

The CVSS base score of 5.3 denotes medium severity. An EPSS score of less than 1% suggests a low likelihood of exploitation in the wild, and the vulnerability is not listed in the CISA KEV catalog. The description does not specify an attack vector, but based on the nature of the flaw it is inferred that exploitation could occur via the website’s front‑end or back‑end interfaces, targeting users with insufficient privileges.