This vulnerability is a missing authorization issue in the Product Carousel Slider for Elementor plugin, allowing exploitation of incorrectly configured access control security levels. It affects all versions up to 2.1.3. The CVSS 3.1 base score is 3.5, reflecting a low severity with network attack vector, low attack complexity, requiring low privileges and user interaction, and causing only a low impact on availability without affecting confidentiality or integrity.

The impact is limited to a low availability impact, with no confidentiality or integrity loss. The vulnerability could allow an attacker with low privileges and user interaction to cause minor disruption or denial of service conditions. There is no evidence of data compromise or elevated privilege escalation.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from Plugin Devs and consider restricting access to the plugin features to trusted users only.