Missing Authorization vulnerability in Jose Mortellaro Specific Content For Mobile allows exploiting incorrectly configured access control security levels. Attackers can gain unauthorized access to content or functionalities guarded by the plugin, potentially compromising confidentiality or modifying data. The weakness is a classic authorization bypass, categorized under CWE-862.

The affected product is the Specific Content For Mobile plugin by Jose Mortellaro. Versions from n/a through <= 0.5.3 are vulnerable. Any WordPress installation using this plugin version is impacted.

The CVSS score of 4.3 indicates a moderate impact. EPSS is less than 1% and the vulnerability is not listed in CISA KEV, suggesting exploitation is unlikely but still possible, especially in environments with insufficient role segmentation. The likely attack vector is through the web interface of the WordPress site where the plugin is active; attackers with any role below the required privilege may exploit the misconfiguration. Monitoring and remediation are advised to prevent unauthorized access.