Broken Access Control vulnerability discovered by Dave Jong in the WordPress Betheme premium theme (versions <= 26.6.1).
Update the WordPress Betheme theme to the latest available version (at least 26.6.3).