This vulnerability in Arconix Shortcodes arises from missing authorization checks, which means that certain actions can be performed by users who should not have the necessary permissions. It affects all versions up to and including 2.1.18. The CVSS vector indicates the attack can be performed remotely with low complexity and requires privileges but no user interaction, resulting in limited confidentiality impact and no integrity or availability impact.

An attacker with limited privileges may exploit this vulnerability to access or perform actions that should be restricted, potentially leading to unauthorized information disclosure. There is no indication of impact on data integrity or availability. No known exploits have been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, review and tighten access control configurations where possible to limit exposure. Monitor for updates from tychesoftwares regarding patches or official mitigations.