This vulnerability in the Magazine3 Schema & Structured Data for WP & AMP plugin arises from missing authorization checks, which means certain functions can be accessed without proper ACL enforcement. Affected versions include all versions up to 1.3.5. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low complexity and no privileges or user interaction required, resulting in limited confidentiality impact but no integrity or availability impact. No patch or official fix information is currently available, and no known exploits have been reported.

An attacker can access functionality that should be restricted by authorization controls, potentially leading to unauthorized information disclosure (limited confidentiality impact). There is no indication of integrity or availability impact. The vulnerability does not require privileges or user interaction and can be exploited remotely over the network.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict access to the plugin's administrative interfaces and monitor for unusual activity related to this plugin. Avoid exposing the plugin's management endpoints to untrusted networks.