This vulnerability (CWE-862) in AdFoxly – Ad Manager, AdSense Ads & Ads.txt involves missing authorization controls, meaning the software does not properly verify whether a user is permitted to perform certain actions. It affects all versions up to 1.8.5. The CVSS 3.1 base score is 5.3, reflecting a medium severity with network attack vector, low attack complexity, no privileges required, no user interaction, and impact limited to integrity loss without confidentiality or availability impact. No patch or official fix has been disclosed by the vendor, and the product is not a cloud service, so remediation depends on vendor updates or user action.

An attacker can exploit this vulnerability to perform unauthorized actions that may alter data or configurations within the affected plugin, potentially impacting the integrity of the system. There is no impact on confidentiality or availability reported. No known active exploitation has been observed.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor and consider restricting access to the plugin's administrative interfaces to trusted users only. No official remediation or temporary fix is currently available.