This vulnerability in the wptasker WordPress Graphs & Charts plugin (graph-lite) arises from missing authorization checks, allowing users with limited privileges to perform actions that should require higher access rights. It affects all versions up to and including 2.0.8. The CVSS 3.1 vector indicates network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality impact, limited integrity impact, and high availability impact.

Exploitation of this vulnerability can lead to unauthorized modification of plugin data or functionality, impacting the integrity and availability of the affected WordPress site components. There is no confidentiality impact reported. No known exploits have been observed in the wild to date.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin's functionality to trusted users only and monitor for unusual activity related to the plugin. Avoid granting unnecessary privileges to users who can interact with the plugin.