The vulnerability is a missing authorization check that allows attackers to exploit incorrectly configured access control security levels. The lack of proper role verification can enable an attacker to perform actions reserved for higher privilege users, potentially accessing or modifying restricted data. This issue is mapped to CWE‑862, representing an authorization bypass.

DigitalME eRoom WordPress plugin, version 1.7.1 and earlier.

The CVSS score of 4.3 indicates low severity. The EPSS score is not provided, and the vulnerability is not listed in the CISA KEV catalog. Based on the description, the likely attack vector is through the WordPress interface where users authenticate; an attacker who gains web access or is a legitimate user could abuse the missing authorization to act with elevated privileges. No other prerequisites are mentioned, so exploitation may be straightforward for those with valid credentials or who can interfere with the configuration settings.