This vulnerability in BoldGrid Post and Page Builder arises from missing authorization checks, enabling attackers with limited privileges to perform actions beyond their intended access rights. The issue affects versions up to and including 1.27.9. The CVSS score is 4.3 (medium), reflecting network attack vector, low attack complexity, requiring privileges, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is low. No patch or remediation details are currently provided by the vendor.

The vulnerability allows an attacker with some level of privileges to exploit improperly configured access controls, potentially leading to unauthorized modification of data (integrity impact). There is no impact on confidentiality or availability. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, review and tighten access control configurations in the affected plugin to limit privilege escalation risks. Monitor for vendor updates regarding official patches or mitigations.