This vulnerability in the Block Spam By Math Reloaded plugin arises from missing authorization checks, permitting unauthorized access to certain functionality that should be constrained by access control lists (ACLs). It affects all versions up to 2.2.4. The CVSS score is 5.3 (medium), with network attack vector, low attack complexity, no privileges required, no user interaction, and impacts availability only. No patch or official remediation guidance is currently available.

The vulnerability allows an attacker to access functionality without proper authorization, which may lead to denial of service or other availability impacts. There is no impact on confidentiality or integrity. No known exploits have been reported in the wild, indicating limited active exploitation at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the affected plugin functionality where possible and monitor for updates from the vendor.