The vulnerability is a missing authorization flaw that allows an attacker to leverage incorrectly configured access control security levels within the Music Press Pro plugin. Without proper checks, a user can execute privileged plugin actions beyond their intended permissions, potentially accessing and manipulating content or settings that should be restricted.

The issue affects the Music Press Pro plugin for WordPress, distributed by tuyennv. Versions from the earliest available up to and including 1.4.6 are vulnerable; any installation running those releases is at risk.

The CVSS base score of 5.3 indicates moderate risk. The EPSS score of less than 1% suggests a very low likelihood of exploitation at the time of analysis, and the vulnerability is not listed in the CISA KEV catalog. The attack likely occurs over the web interface, may require authenticated access, and exploits the absence of proper authorization checks; the exact conditions are inferred from the description.