This vulnerability in the Dashboard Welcome for Beaver Builder plugin involves missing authorization checks, which means that access control is improperly configured. As a result, unauthorized users may exploit this flaw to perform actions without the necessary permissions. The affected versions include all releases up to 1.0.8. The CVSS score of 5.3 reflects a medium severity impact primarily due to integrity loss without confidentiality or availability impact. No patch or vendor advisory is currently available, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized users to bypass access controls, potentially leading to unauthorized modification of data or settings within the plugin. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin functionality and monitor for updates from IdeaBox Creations. No vendor advisory or patch links are currently available.