This vulnerability in e-plugins Lawyer Directory (<= 1.3.4) arises from missing authorization checks, allowing unauthorized users to bypass access controls. The issue affects the plugin's access control security levels, potentially enabling attackers to access or modify data without proper permissions. The CVSS 3.1 base score is 7.3 (high), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impacts on confidentiality, integrity, and availability. There is no vendor advisory or patch link available, and no known exploits have been reported.

Exploitation of this vulnerability can lead to unauthorized access to restricted functionality or data within the Lawyer Directory plugin, potentially compromising confidentiality, integrity, and availability of the affected system. The high CVSS score indicates a significant risk if exploited, but no active exploitation has been observed so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, users should consider restricting access to the plugin or disabling it if possible to mitigate risk. Monitor vendor communications for updates on patches or official mitigations.