This vulnerability in Ovic Responsive WPBakery involves missing authorization checks, which means that users with some level of access privileges may be able to perform unauthorized actions. The CVSS 3.1 base score is 5.4 (medium), reflecting network attack vector, low attack complexity, required privileges, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and limited availability impact. The affected versions include all versions up to 1.3.0. No vendor advisory or patch information is currently available.

An attacker with low privileges could exploit this missing authorization vulnerability to perform unauthorized actions that may affect the integrity and availability of the affected system. Confidentiality is not impacted. There are no known active exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict user privileges to the minimum necessary and monitor for unusual activity related to the plugin. Avoid granting unnecessary permissions to users who can interact with the plugin.