This vulnerability in the Munir Kamal Block Slider plugin (versions up to 2.2.3) involves missing authorization checks, which means that access control is improperly configured. As a result, users with limited privileges may be able to exploit this flaw to perform unauthorized actions. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low attack complexity, requiring privileges but no user interaction, and resulting in high confidentiality impact without affecting integrity or availability.

An attacker with limited privileges could exploit the missing authorization controls to gain unauthorized access to sensitive information, leading to a high confidentiality impact. There is no impact on integrity or availability reported. No known exploits have been observed in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin and monitor for unusual privilege escalations. Avoid granting unnecessary privileges to users who can interact with the Block Slider plugin.