This vulnerability (CWE-862) in Ninja Tables involves missing authorization controls, which means that the plugin does not properly verify whether a user has the necessary permissions before allowing access to specific features or data. The affected versions include all releases up to 5.0.5. The CVSS vector indicates the attack can be performed remotely without privileges or user interaction, with limited confidentiality impact and no integrity or availability impact. No vendor advisory or patch links are provided, and the remediation level is unspecified.

An attacker can remotely exploit this vulnerability without authentication or user interaction to gain unauthorized access to certain data or functionality within the Ninja Tables plugin. The impact is limited to confidentiality loss; integrity and availability are not affected. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from WPManageNinja LLC and consider restricting access to the affected plugin functionality where possible.