Subscriber privilege escalation via auth bypass

Broken authentication in Leyka 3.32.3 and earlier allows remote authenticated users to reach higher-privileged functions. The retrieved Patchstack, NVD, and GitHub records do not disclose the affected endpoint or function, so the broken-authentication mechanism remains undisclosed beyond subscriber-level access reaching protected operations in the Teplitsa of Social Technologies plugin. Exploitation requires a valid Subscriber account on a site running the plugin, and published impact data bounds the consequence to unauthorized access to higher-privileged actions with resulting data read or limited state changes rather than a demonstrated full site takeover.