The vulnerability is a missing authorization flaw that permits exploitation of incorrectly configured access control security levels. Based on the description, it is inferred that this broken access control may allow unauthenticated or improperly authenticated users to access privileged data or functions. The weakness is classified as CWE‑862, indicating improper enforcement of authorization checks.

The affected product is the Tobias CF7 WOW Styler plugin for WordPress. All versions up through 1.7.6, including any prior releases, are vulnerable. No other vendors or products are listed.

The CVSS score of 5.3 marks this issue as moderately severe, with no EPSS metric available and it is not listed in the CISA KEV catalog. Based on the description, it is inferred that the likely attack vector is remote access via the web interface, where an attacker can use normal user flows to gain higher privileges than intended. Because the flaw is an authorization failure, exploitation requires only entry to the WordPress site and does not necessitate other conditions, making the risk tangible for sites that rely on the default or incorrect configuration.