The vulnerability in the raratheme App Landing Page theme for WordPress is a missing authorization flaw that allows an attacker to bypass standard access control checks. This can enable unauthorized viewing or alteration of content, settings, or other data within the WordPress site. The flaw is classified as CWE-862 – Missing Authorization, and no mention of denial of service or code execution is provided in the description.

The affected product is raratheme's App Landing Page theme for WordPress. All installations running any version up to and including 1.2.2 are susceptible, while the description does not indicate any specific earlier releases.

The CVSS score of 5.3 indicates moderate severity. The EPSS score is below 1%, suggesting that large‑scale exploitation is unlikely. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector involves sending crafted HTTP requests to endpoints that lack proper authorization checks, though the CVE data does not explicitly confirm this; this inference is drawn from the mention of incorrectly configured access control security levels.