This vulnerability (CWE-862) in AMP for WP involves missing authorization checks, which could allow an attacker with limited privileges to perform actions or access resources beyond their intended permissions. The affected versions include all versions up to 1.0.96.1. The CVSS vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, and impacts confidentiality, integrity, and availability at a low level. No vendor advisory or patch information is currently available.

The vulnerability could allow an attacker with some level of access to bypass authorization controls, potentially leading to unauthorized information disclosure, modification, or disruption of service within the AMP for WP plugin environment. The impact is rated medium based on the CVSS score of 6.3. There are no reports of active exploitation in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor for updates from the vendor and consider restricting access to the plugin's administrative functions to trusted users only.