This vulnerability involves improper access control checks in the linethemes GLB WordPress theme, classified as CWE-862. Key detail from the CVE description: "Missing Authorization vulnerability in linethemes GLB glb allows Exploiting Incorrectly Configured Access Control Security Levels." The flaw enables an attacker to perform actions normally restricted to authorized users, potentially exposing or modifying site content and settings, thereby compromising data integrity and confidentiality.

Affected product: linethemes GLB Theme for WordPress. Version range: all releases up to and including 1.2.2. Users operating any version 1.2.2 or earlier are vulnerable.

The CVSS score of 5.4 indicates moderate severity, and the EPSS score of less than 1% suggests a low probability of exploitation. It is not listed in the CISA KEV catalogue. The likely attack vector is via the WordPress web interface (HTTP/HTTPS) where an attacker can exploit the missing authorization checks. Based on the description, it is inferred that no additional authentication or environmental prerequisites are required beyond access to the external interface.