This vulnerability, identified as CWE-862 (Missing Authorization), affects WPBakery Page Builder versions <= 8.7.2. It allows users with subscriber-level privileges to bypass access controls, potentially modifying data or performing actions beyond their intended permissions. The CVSS 3.1 base score is 6.5, reflecting a network attack vector with low complexity, requiring low privileges, no user interaction, and resulting in integrity impact only. No known exploits are reported in the wild, and no vendor advisory or patch has been published as of the data provided.

The vulnerability enables integrity violations by allowing unauthorized modification or manipulation of data or functionality within the WPBakery Page Builder plugin by subscriber-level users. There is no impact on confidentiality or availability according to the CVSS vector. This could lead to unauthorized changes that may affect site content or behavior.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, consider restricting subscriber privileges or limiting plugin usage to trusted users as a precaution.