The vulnerability identified as CVE-2025-24682 affects the Michael Super Block Slider plugin through version 2.7.9. It is caused by missing authorization checks, allowing users with limited privileges to potentially perform actions that should require higher access rights. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity and requiring low privileges, no user interaction, and resulting in limited confidentiality impact without integrity or availability effects. No vendor advisory or patch information is currently available, and no exploits have been reported in the wild.

The vulnerability allows unauthorized access to certain functionality within the Super Block Slider plugin, potentially exposing limited confidential information. There is no impact on integrity or availability. Since no known exploits exist in the wild, the immediate risk is moderate but could increase if exploitation techniques emerge.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should limit access to the plugin features to trusted users only and monitor for updates from the vendor. No official patch or workaround is currently documented.