A missing authorization vulnerability exists in John-Michael L'Allier Create (mediavine-create) versions up to 3.1.1. This flaw allows unauthorized users to exploit incorrectly configured access control security levels, potentially leading to unauthorized information disclosure. The vulnerability has a CVSS score of 5.3, indicating a medium severity level.