This vulnerability (CVE-2024-31095) affects the Ricard Torres Thumbs Rating plugin (up to version 5.1.0) and is categorized as an authorization bypass via a user-controlled key (CWE-639). The CVSS 3.1 base score is 5.3 (medium severity), with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss. No patch or official remediation has been published yet. The issue allows an attacker to bypass authorization controls by manipulating a key that should be controlled by the system, potentially enabling unauthorized actions within the plugin.

The vulnerability allows an attacker to bypass authorization mechanisms, leading to unauthorized modification or manipulation of data or functionality within the affected plugin. The impact is limited to integrity loss without confidentiality or availability impact. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting access to the affected plugin or disabling it if feasible. Monitor for updates from the vendor or trusted security sources.