This vulnerability (CVE-2024-30522) in the Newsletter plugin allows an attacker to bypass authentication mechanisms by spoofing, classified under CWE-290 (Authentication Bypass by Spoofing). It affects versions up to 8.2.0 of the plugin. The CVSS 3.1 base score is 5.3, indicating a medium severity issue with network attack vector, low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity as per the CVSS vector, with no confidentiality or availability impact. No patch or official remediation has been disclosed by the vendor or in the advisory data.

The vulnerability enables an attacker to bypass authentication controls, potentially allowing unauthorized access to functionality within the Newsletter plugin. The impact is limited to integrity, meaning attackers could perform unauthorized actions but without direct confidentiality or availability consequences. There are no known exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is currently available, users should monitor vendor communications for updates. Until a patch is released, consider restricting access to the affected plugin or implementing compensating controls where feasible.