The ArtiBot Free Chat Bot for WordPress Websites plugin suffers from a missing capability check in its artibot_update function, enabling unauthorized modification of plugin settings. Authenticated attackers with subscriber-level privileges or above can exploit this vulnerability to update plugin configurations. The issue affects all versions up to and including 1.1.6. The CVSS 3.1 base score is 5.0, reflecting a medium severity with network attack vector, low attack complexity, and privileges required at the low level. No integrity impact is confirmed beyond the unauthorized modification of settings, and availability and confidentiality are not affected.

The vulnerability allows an authenticated user with subscriber-level access or higher to modify plugin settings without proper authorization. This could lead to unauthorized changes in the plugin's behavior or configuration, potentially impacting the website's functionality or security posture. There is no direct confidentiality or availability impact reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict subscriber-level access and above to trusted users only. Monitor for updates from the vendor regarding patches or official fixes for this vulnerability.