Missing authorization within the Majestic Support WordPress plugin allows attackers to bypass intended access controls. The weakness grants the ability to read, modify, or delete data that the plugin manages, leading to potential data exposure or tampering. Key weakness is Access Control, identified as CWE‑862.

Advisory applies to the Ahmad:Majestic Support plugin at all versions up to and including 1.2.0. Wordpress sites using this plugin should note that any version through 1.2.0 inherits the flaw. No later releases are affected.

With a CVSS score of 5.3, the vulnerability poses a moderate risk. Because the EPSS score is not available and the issue is not listed in the KEV catalog, exploitation data is limited. Attackers may exploit the flaw remotely through the web interface, particularly if the site improperly restricts plugin access. A successful attack could enable unauthorized data access or modification.