The Greek Multi Tool plugin by bigdrop.gr, up to version 2.3.1, contains a missing authorization vulnerability that leads to incorrectly configured access control security levels. This flaw allows unauthenticated attackers to perform actions that should require authorization, impacting the availability of the affected system. The CVSS 3.1 base score is 7.5, reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or integrity impact, and high availability impact.

The vulnerability impacts the availability of systems using the affected plugin by allowing unauthorized access to functionality that should be restricted. Confidentiality and integrity are not affected. There are no known active exploits in the wild, but the high CVSS score indicates a significant risk if exploited.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor the vendor's communications for updates. Until a fix is available, consider restricting access to the plugin's functionality or disabling it if feasible to reduce exposure.