This vulnerability arises from missing authorization checks in the Super Block Slider WordPress plugin, allowing an attacker to exploit incorrectly configured access control security levels. The flaw could enable an attacker to access or modify plugin settings or content that should be limited, representing a broken access control weakness (CWE‑862).

The issue affects the Super Block Slider plugin developed by Michael, specifically versions that are 2.7.9 or earlier. No other vendors or products are listed as impacted.

The CVSS score of 4.3 classifies the danger as moderate. The EPSS score of less than 1% indicates a low likelihood of real‑world exploitation, and the vulnerability is not included in CISA’s KEV catalogue. The attack vector is not explicitly detailed in the description, but the nature of the missing authorization suggests a web‑based path through the WordPress administration interface, likely requiring some level of authenticated access that is misconfigured or overly permissive. The exploitation would provide an attacker with unauthorized access to plugin functionality and potentially underlying site content.