The Monetag Official Plugin for WordPress versions up to 1.1.3 suffers from a missing authorization vulnerability. This means that certain functions or resources within the plugin lack proper access control, allowing unauthenticated or unauthorized users to perform actions they should not be permitted to. The vulnerability is network exploitable without requiring privileges or user interaction, and it can cause a partial loss of integrity and availability. The CVSS v3.1 base score is 7.2, indicating a high severity level.

Exploitation of this vulnerability can lead to unauthorized modification of plugin data or functionality, potentially disrupting service availability or integrity. Confidentiality impact is not indicated. No known active exploits have been reported, but the vulnerability presents a significant risk due to lack of authorization enforcement.

There is currently no official patch or fix available for this vulnerability. Users should monitor the vendor's official channels for updates and apply any patches once released. Until a fix is available, restricting access to the plugin's administrative interfaces and limiting exposure to untrusted networks may reduce risk.