This vulnerability in the Weblizar Coming Soon plugin allows unauthorized access to sensitive information because certain functionality is not properly constrained by access control lists (ACLs). The affected versions include all up to 1.6.3. The CVSS v3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, resulting in limited confidentiality impact but no integrity or availability impact. No patch or official remediation level has been published by the vendor as of the current data.

An attacker can remotely access sensitive information that should be protected, potentially leading to information disclosure. The impact is limited to confidentiality loss without affecting integrity or availability. There are no known active exploits in the wild, reducing immediate risk, but the vulnerability could be leveraged if discovered by attackers.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin functionality where possible and monitor for updates from Weblizar. Avoid exposing the plugin interface to untrusted networks if feasible.