This vulnerability is a broken access control issue (CWE-862) affecting Advanced Custom Fields: Font Awesome Field plugin versions up to 6.1.1. It allows users with some level of privileges to bypass authorization checks, potentially accessing or manipulating features without proper permission. The CVSS v3.1 base score is 4.3, indicating a medium severity with network attack vector, low attack complexity, requiring privileges, no user interaction, and limited confidentiality impact. No vendor advisory or patch information is currently available.

The impact is limited to confidentiality as per the CVSS vector, meaning unauthorized users might gain access to some data or functionality they should not see. There is no impact on integrity or availability reported. The vulnerability requires an attacker to have some privileges on the system and can be exploited remotely over the network without user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary workaround is documented, users should monitor vendor communications for updates. Until a patch is available, restrict access to trusted users and review permissions carefully to minimize risk.