This vulnerability in the WP Attractive Donations System plugin arises from missing authorization checks, allowing unauthorized access to functionality that should be restricted. The issue affects all versions up to 1.25. The CVSS vector indicates it is remotely exploitable without authentication or user interaction, impacting availability but not confidentiality or integrity. The absence of a patch or vendor advisory means remediation status is unclear.

The vulnerability can lead to a high impact on the availability of the affected system, potentially causing denial of service or disruption of donation processing. There is no indication of confidentiality or integrity compromise. No known active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative interfaces and monitor for unusual activity related to donation processing. Avoid exposing the affected plugin to untrusted networks.