This vulnerability in WP Messiah's WP Mobile Bottom Menu plugin involves missing authorization checks due to improperly configured access control. It affects all versions up to 1.4.0 and could allow users with limited privileges to execute unauthorized actions within the plugin. The CVSS 3.1 base score is 4.3, reflecting a network attack vector with low complexity, requiring low privileges and no user interaction, impacting integrity but not confidentiality or availability. No patch or official remediation has been provided in the available data.

The vulnerability allows unauthorized modification or actions within the WP Mobile Bottom Menu plugin by users with limited privileges, potentially leading to integrity issues. There is no impact on confidentiality or availability reported. No known exploits have been observed in the wild, and the overall severity is medium.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, limit access to trusted users and monitor for suspicious activity related to the WP Mobile Bottom Menu plugin. Avoid granting unnecessary privileges to users who can interact with this plugin.