This vulnerability (CWE-862) in Websupporter Filter Custom Fields & Taxonomies Light plugin involves missing authorization controls, which could allow users with some privileges to execute actions beyond their intended permissions. The affected versions include all versions up to 1.05. The CVSS 3.1 base score is 4.3, reflecting a network attack vector, low attack complexity, requiring low privileges but no user interaction, and resulting in low impact on integrity without affecting confidentiality or availability. No patch or official remediation level has been disclosed by the vendor or in the advisory.

The impact is limited to integrity as unauthorized actions could be performed by users with some privileges. Confidentiality and availability are not affected. There are no known exploits in the wild, reducing immediate risk. However, the absence of authorization checks could allow privilege escalation or unauthorized modifications within the plugin's scope.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to users with minimal privileges and monitor for unusual activity related to the plugin. Avoid granting unnecessary permissions to users interacting with this plugin.