This vulnerability, identified as CWE-862 (Missing Authorization), affects the Charitable plugin versions up to 1.8.1.7. It allows unauthorized users to access functionality that should be protected by access control mechanisms. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low integrity impact. No patch or official remediation level has been published, and the product is not a cloud service, so remediation depends on vendor updates.

The vulnerability allows unauthorized access to certain functions within the Charitable plugin, potentially enabling integrity violations such as unauthorized modifications or actions within the application. There is no impact on confidentiality or availability reported. No known exploits in the wild have been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No vendor advisory indicates that the issue is already mitigated or requires no action.