The WPBackItUp Backup and Restore WordPress plugin contains a CWE-862 missing authorization vulnerability that permits access to functionality without proper ACL enforcement. This affects all versions up to 1.50. The vulnerability allows an unauthenticated attacker to invoke certain functions that should require authorization, potentially leading to limited integrity impact. The CVSS 3.1 base score is 5.3, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality impact, low integrity impact, and no availability impact. No patch or official remediation has been released as of the published date.

The vulnerability allows unauthorized users to access functionality that should be restricted, which may lead to limited integrity impact within the affected WordPress plugin. There is no confidentiality or availability impact reported. No known exploitation has been observed in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should monitor vendor communications for updates. No specific workaround or temporary fix is currently documented.