This vulnerability in the Ridhi theme for WordPress is a missing authorization flaw that allows users to perform actions or view data that should be restricted. The weakness is identified as CWE-862 (Missing Authorization). An attacker who can trigger the theme's functionality may gain unauthorized access to administrative features or expose private content.

The issue affects all releases of the Ridhi theme up to and including version 1.1.2. In particular, any site that has the theme installed with a version <= 1.1.2 is susceptible. The vendor responsible for the theme is raratheme. No sub‑product or OS dependencies are mentioned.

The CVSS score for this vulnerability is 5.3, indicating a moderate risk level. EPSS is below 1%, suggesting that currently there is a low probability of exploitation in the wild, and the vulnerability is not listed in CISA's KEV catalog. The attack vector is likely web‑based and requires a user that can interact with the theme's interface or URLs. An attacker would need to supply particular input or access routes that bypass the missing authorization checks to successfully exploit the vulnerability.