This vulnerability in WP Sort Order arises from missing authorization controls, allowing users with limited privileges to perform actions they should not be authorized to execute. The issue affects all versions up to 1.3.1. The CVSS vector (AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N) indicates that the vulnerability can be exploited remotely over the network with low attack complexity, requiring low privileges and no user interaction, resulting in limited integrity impact without affecting confidentiality or availability. No official fix or patch has been released by the vendor as of the publication date.

The vulnerability allows an attacker with low privileges to perform unauthorized actions that may alter data integrity within the WP Sort Order plugin. There is no impact on confidentiality or availability. No known exploits are currently reported, so the risk of active exploitation is low at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to users with trusted privileges and monitor for unusual activity related to the WP Sort Order plugin. Avoid granting unnecessary privileges to users who do not require them for their role.