This vulnerability in Maidul Team Manager (wp-team-manager) arises from missing authorization checks, leading to incorrect access control configurations. It affects all versions up to and including 2.5.1. The CVSS 3.1 base score is 5.3, reflecting a network attack vector with low attack complexity, no privileges required, and no user interaction needed. The impact is limited to integrity, with no confidentiality or availability impact reported. No known exploits in the wild have been reported, and no official patch or vendor advisory information is currently available.

An attacker can exploit the missing authorization to perform unauthorized actions that affect data integrity within the affected Maidul Team Manager versions. There is no impact on confidentiality or availability. The vulnerability can be exploited remotely without authentication or user interaction.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no patch or official fix information is provided, users should monitor Maidul's official channels for updates. Until a fix is available, restrict network exposure of the affected application and review access control configurations to minimize risk.