This vulnerability (CWE-862) in the Very Good Plugins Fatal Error Notify plugin involves missing authorization checks, potentially allowing users with low privileges to execute certain actions that should require higher authorization. It affects all versions up to 1.5.2. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, and low integrity impact. No vendor advisory or patch is currently available, and no exploits are known in the wild.

The vulnerability could allow an attacker with low privileges to perform unauthorized actions within the plugin, potentially leading to limited integrity impact. There is no impact on confidentiality or availability reported. No active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to users with minimal privileges and monitor for unusual activity related to the plugin. Avoid granting unnecessary permissions to users who can interact with the plugin.