Based on the description, the Simple:Press plugin contains a missing authorization flaw that permits unauthorized users to bypass the plugin’s intended access controls. Attackers can exploit incorrectly configured security levels to create, edit, delete content, or access data reserved for privileged users. This misimplementation of authentication checks can compromise both the confidentiality and integrity of site content.

The vulnerability affects the WordPress Simple:Press plugin from the earliest version through 6.11.5. Users running any of these releases on any WordPress installation are impacted.

The CVSS score of 5.3 indicates a moderate severity, while the EPSS score of less than 1% shows a low probability of exploitation at present. The vulnerability is not listed in CISA’s KEV catalog. Based on the description, the likely attack vector involves authenticated users who can trigger the plugin’s protected functions; however, the exact conditions required to exploit this flaw are not detailed in the available description.