This vulnerability in QuanticaLabs CSS3 Accordions for WordPress arises from missing authorization checks, allowing an attacker with low privileges to exploit incorrectly configured access control. The issue affects versions up to and including 3.0. The CVSS vector indicates network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact. The product is cloud-hosted, and the vendor manages remediation. A patch is available to fix this vulnerability.

Exploitation of this vulnerability could allow an attacker with some privileges to perform unauthorized actions that affect the integrity and availability of the affected service. There is no impact on confidentiality. The severity is rated medium with a CVSS score of 5.4. No known exploits are reported in the wild at this time.

A patch is available for this vulnerability. Since the product is a cloud service, the vendor manages remediation server-side. Users should verify with the vendor advisory that their service instance has been updated to the patched version to mitigate this issue.