This vulnerability in Live Copy Paste for Elementor (<= 1.5.3) is classified as CWE-862 Missing Authorization. It allows users with contributor-level privileges to bypass intended access controls, potentially enabling unauthorized actions. The CVSS 3.1 base score is 4.3 (medium), reflecting network attack vector, low attack complexity, and no user interaction required. There is no indication of integrity or availability impact, only limited confidentiality impact. No known exploits in the wild or vendor patches have been reported as of the publication date.

An attacker with contributor privileges can exploit this missing authorization flaw to access or perform actions not normally permitted for their role. The impact is limited to confidentiality loss, with no reported integrity or availability effects. This could lead to unauthorized disclosure of information within the affected plugin's scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Restrict contributor privileges where possible until a patch is available.