This vulnerability in richplugins Trust.Reviews fb-reviews-widget arises from missing authorization controls, specifically due to incorrectly configured access control security levels. It affects versions up to 2.3 and allows an attacker with low privileges to perform unauthorized actions that can alter data integrity. The CVSS 3.1 base score is 4.3, reflecting network attack vector, low attack complexity, low privileges required, no user interaction, and impact limited to integrity. No patch or official remediation guidance is currently available, and no known exploits have been reported.

The vulnerability allows unauthorized modification of data within the Trust.Reviews plugin, impacting data integrity. There is no impact on confidentiality or availability. Since exploitation requires low privileges and no user interaction, an attacker with some access could exploit this to alter review data or related information.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the Trust.Reviews plugin to trusted users only and monitor for unauthorized changes. Avoid exposing the plugin to untrusted users or networks.