The vulnerability identified as CVE-2025-26883 affects the bPlugins Animated Text Block plugin through missing authorization controls. This flaw allows users with low privileges to bypass intended access restrictions due to incorrect access control configurations. The affected versions include all releases up to 1.0.7. The CVSS 3.1 base score is 6.5, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, high confidentiality impact, and no impact on integrity or availability. No patch or vendor advisory is currently available, and no exploits have been reported in the wild.

Successful exploitation could allow an attacker with low privileges to access or retrieve sensitive information that should be restricted, impacting confidentiality. There is no impact on integrity or availability reported. Since no known exploits exist in the wild, the immediate risk appears limited but could increase if exploitation techniques are developed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Animated Text Block plugin to trusted users only and monitor for unusual activity related to this component. Avoid granting unnecessary privileges to users who can interact with this plugin.