This vulnerability in edmon.parker's Read More & Accordion plugin (<= 3.5.5.1) is due to missing authorization controls, resulting in incorrect access control enforcement. The issue allows users with some level of privilege to bypass intended restrictions, leading to potential integrity violations. The CVSS score is 4.3 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, and impact limited to integrity. No patch or vendor advisory is currently provided, and the product is not a cloud service.

The vulnerability impacts the integrity of the affected system by allowing unauthorized actions due to missing authorization checks. There is no impact on confidentiality or availability. No known exploits have been reported, so active exploitation is not confirmed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations where possible to limit privilege escalation risks. Monitor for vendor updates regarding patches or official mitigations.