Missing Authorization vulnerability in Rara Themes Metro Magazine allows Exploiting Incorrectly Configured Access Control Security Levels.
This issue affects Metro Magazine: from n/a through 1.4.1.
Credits
Trương Hữu Phúc (truonghuuphuc) | Patchstack Bug Bounty Program