This vulnerability involves missing authorization checks in the sminozzi Stop and Block bots plugin Anti bots (versions <= 1.48). Specifically, certain functionality is accessible without proper ACL enforcement, allowing unauthorized users to invoke actions that should be restricted. The CVSS 3.1 base score is 5.3 (medium), reflecting network attack vector, low attack complexity, no privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but low impact on integrity.

The vulnerability allows unauthorized access to certain plugin functions due to missing authorization controls. This could lead to integrity issues within the plugin's operation, such as unauthorized modification or interference with bot blocking features. There is no impact on confidentiality or availability reported. No known active exploitation has been documented.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the plugin's administrative interfaces and monitor for unusual activity related to bot blocking functionality. Avoid exposing management endpoints publicly if possible.