This vulnerability in Shortlinks by Pretty Links (<= 3.6.15) arises from missing authorization checks, enabling attackers with limited privileges to exploit incorrectly configured access control mechanisms. The CVSS 3.1 score is 4.3 (medium), reflecting network attack vector, low attack complexity, low privileges required, no user interaction, unchanged scope, no confidentiality or availability impact, but integrity impact is present. No patch or vendor advisory is available at this time.

The vulnerability allows an attacker with low privileges to perform actions that should be restricted, potentially modifying data or configurations within the plugin. There is no impact on confidentiality or availability. No known exploitation in the wild has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict access to the plugin's administrative functions to trusted users only and monitor for unusual activity related to access control.