This vulnerability in e-plugins Listihub arises from missing authorization checks, resulting in incorrectly configured access control security levels. It affects all versions up to and including 1.0.6. The CVSS 3.1 vector (AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) indicates that the vulnerability is remotely exploitable without privileges or user interaction, and can cause limited impact on confidentiality, integrity, and availability. No patch or official remediation information is currently available, and the product is not a cloud service.

Exploitation of this vulnerability could allow an unauthenticated attacker to bypass access controls, leading to limited disclosure of information, modification of data, and disruption of service within the affected Listihub installations. The impact is rated as high severity based on the CVSS score of 7.3. However, no known exploits have been reported in the wild so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or patch links are provided, users should monitor vendor communications for updates. Until a patch is available, restrict access to Listihub instances and review access control configurations to minimize exposure.