This vulnerability in the Filipe Seabra WordPress Manutenção plugin allows an attacker to bypass authentication mechanisms by spoofing, leading to unauthorized access to certain functionality. It affects all versions up to 1.0.6. The CVSS 3.1 base score is 3.7, reflecting a network attack vector with high attack complexity, no privileges required, and no user interaction needed. The impact is limited to a low confidentiality loss without integrity or availability impact. No vendor advisory or patch information is currently available, and no known exploits have been reported.

The vulnerability could allow an attacker to bypass authentication controls and access functionality that should be restricted. The impact is limited to a low confidentiality loss, with no reported impact on integrity or availability. There are no known active exploits targeting this vulnerability at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin or disabling it if possible to reduce exposure. Monitor vendor channels for updates regarding patches or mitigations.