This vulnerability involves a missing authorization mechanism in the ShortPixel Adaptive Images WordPress plugin up to version 3.8.2. The absence of proper authorization controls means that unauthenticated attackers can invoke functionality that should be restricted, resulting in a potential integrity compromise. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity. No patch or vendor advisory is currently available, and the affected product is not a cloud service.

The vulnerability allows unauthorized users to perform actions that could alter data or behavior within the ShortPixel Adaptive Images plugin, impacting data integrity. There is no evidence of confidentiality or availability impact. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, consider restricting access to the plugin's functionality or disabling the plugin if feasible to reduce risk.