The vulnerability is a Missing Authorization flaw in the WordPress Nanosoft theme that allows an attacker to perform actions beyond what a legitimate user is allowed. This broken access control can enable an attacker to create, edit, or delete content, or manage other users, thereby compromising the integrity and confidentiality of the website. The weakness is classified as CWE-862, indicating improper authorization checks.

The affected product is the WordPress Nanosoft theme from linethemes. All versions prior to 1.3.2 (i.e., n/a through < 1.3.2) are affected. Users running those versions should review their installation for potential exploitation paths.

The CVSS base score is 5.4, indicating a medium severity. The EPSS score is below 1%, suggesting a low likelihood of widespread exploitation at the present time. The vulnerability is not listed in the CISA KEV catalog. Based on the description, the attack vector is likely remote via the web interface, but the exact method of exploitation is not detailed in the data.