CVE-2026-56063 is a missing authorization vulnerability (CWE-862) in the bPlugins MailChimp Block plugin versions up to 1.1.15. The flaw allows unauthenticated attackers to bypass access controls, potentially leading to unauthorized actions or data exposure. The CVSS 3.1 base score is 8.3, indicating a high severity with network attack vector, low attack complexity, no privileges or user interaction required, and impacts on confidentiality, integrity, and availability. No vendor advisory or patch information is available at this time.

An unauthenticated attacker can exploit this vulnerability to bypass access controls in the MailChimp Block plugin, potentially leading to unauthorized access or modification of data and disruption of service. The CVSS score reflects partial impact on confidentiality, integrity, and availability, making this a significant security risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the affected plugin functionality where possible and monitor for suspicious activity related to the MailChimp Block plugin.