This vulnerability in AddonMaster Load More Anything involves missing authorization controls, allowing users with limited privileges to perform actions they should not be authorized to do. The CVSS score of 5.4 reflects a network attack vector with low complexity, requiring low privileges and no user interaction. The impact is limited to integrity and availability, with no confidentiality loss. The affected versions include all versions up to 3.3.3. No vendor advisory or patch information is currently available.

The vulnerability allows unauthorized actions that can affect the integrity and availability of the affected system or plugin functionality. There is no impact on confidentiality. Since the attack complexity is low and privileges required are low, an attacker with limited access could exploit this to disrupt or alter plugin behavior. No known exploits have been reported so far.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges that could be leveraged to exploit this missing authorization vulnerability.